On receiving a notification of findings from the competent authority, the organisation must identify the root cause or causes and contributing factors of the non-compliance, define a corrective action plan, and demonstrate the correction to the authority's satisfaction, all within the period agreed with the authority.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.