Every public body, including public-law enterprises competing in the market, must designate a data protection officer; one officer may serve several bodies given their structure and size. The officer is chosen for professional qualities, above all specialist knowledge of data protection law and its practice and the capacity to carry out the s 7 tasks, and may be an employee or engaged under a service contract. The body publishes the officer's contact details and reports them to the Federal Commissioner.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.