The organization should keep a documented set of protection and support measures with plans for putting them into effect, assign clearly who is responsible for protecting and supporting the whistleblower, and use the measures proactively: discuss them with the whistleblower, review them together after a time, take account of particular vulnerabilities, keep the whistleblower informed, give advice and practical assistance, and watch for detrimental conduct during and after the case. What a measure can achieve depends on the organization and on the working relationship with the whistleblower (an employee, an agency worker, a supplier's worker), and documenting the set brings those limits to light in advance. The substance comes from the convenor's guidance keyed to 8.4.2 and 8.4.3, the SUSA protection-capacity items and the UNOPS review of the standard's criteria (protection and hands-on support while the case runs), with the introduction's outcome of supporting and protecting whistleblowers; the clause text is not held.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.