The organization should determine the necessary competence of persons doing work under its control whose work bears on how well the whistleblowing management system performs (receiving reports, assessing them, investigating, protecting and supporting), ensure they are competent on the basis of education, training or experience, take actions to acquire competence where needed and evaluate their effectiveness, and retain documented information as evidence of competence. Parallels ISO 37301:2021, 7.2.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.