A licence is subject to the terms and conditions it specifies, and a licensee that uses it for a purpose other than that for which it was granted pays 50,000 penalty units. The held provisional licence (180 days, pending the remaining requirements) conditions it on the Act and its directives and guidelines, lists the service areas authorised, requires the personnel delivering services to be accredited cybersecurity professionals in the relevant area, forbids false representation and requires good faith, confidentiality and data protection compliance, and requires 24-hour incident reporting.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.