Level 1 is reached when the assessed profile contains Data Processing (DQC.2) and Data Security Management (DRS.4), each rated at capability Level 1, which means process performance (PA.1.1) is largely or fully achieved.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.