ISO 31000:2018 5.4.4 applies, plus: when resources are allotted to this work, top management and oversight bodies should provide for what privacy work specifically needs, for instance people inside or outside the organization who bring privacy knowledge, skills and ability and have been trained in privacy matters.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.