The processor must apply appropriate technical and organisational procedures and measures to protect personal data at the design stage, both when identifying the means of processing and during processing, taking account of implementation cost and the nature, scope and purposes of processing.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.