Training and awareness for personnel should cover, at a minimum, how a report is handled (not knowing what happens after reporting erodes trust), what a whistleblower can expect after reporting (the sequence of feedback and the possible outcomes), the protection and confidentiality measures with their limits and what the whistleblower can do, where a whistleblower can get advice, which whistleblowing and data protection laws apply and where to find them, and which external authority is competent and how to reach it, alongside what can be reported and how. The substance comes from the convenor's guidance keyed to 7.3.1 to 7.3.3; the clause text is not held.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.