The organisation requires its processors, agents and service providers to inform it when they become aware of inaccurate, incomplete or outdated information, and has procedures to receive those reports and make corrections. Requirement 25 in the 50-requirement set certified against until 31 March 2027.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.