Protecting the subject of a report: confidentiality of their identity (7.5.5 covers subjects), presumption of innocence, due process with the right to respond (8.4.1), protection from unfounded or malicious reports and from detriment while the matter is assessed, and information about the outcome as appropriate; the clause text is not held.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.