The organisation has proportional safeguards in each of four categories: employee training and management (37.a), information systems and management including network and software design and information processing, storage, transmission and disposal (37.b), detecting, preventing and responding to attacks, intrusions and other failures (37.c), and physical security (37.d), using suitable and reasonable means such as encryption to protect all personal information. Requirement 30 in the 50-requirement set certified against until 31 March 2027.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.