The processor must provide all means to prove its compliance when the controller or the Office asks, and must process in accordance with the rules, conditions and controls in the Decree-Law and its Executive Regulations or the Office's instructions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.