The controller must take appropriate technical and organisational measures to apply the standards needed to protect and secure personal data, preserve its confidentiality and privacy and prevent it being breached, destroyed, altered or tampered with, taking into account the nature, scope and purposes of processing and the risks to the data subject's confidentiality and privacy.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.