The organization should plan, implement and control the processes needed to meet the guidance of this document and to implement the actions determined in clause 6, establishing criteria for the processes and implementing control in accordance with them, and should see that every step of the whistleblowing process begins promptly and finishes within a reasonable period (the deck quotes the timeliness sentence); outsourced elements such as external reporting channels should be controlled. Parallels ISO 37301:2021, 8.1 for the harmonized part.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.