The public body makes sure that AI systems, whether developed internally or supplied by a third party, comply with its IT security policies and standards and with guidance from the Data Protection Commission and the National Cyber Security Centre, protecting system integrity and the sensitive data entrusted to it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.