In addition to the Article 9 duties, the DPO of a controller or processor follows and implements the security policies and procedures necessary to prevent any breach or infringement of sensitive personal data.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.