Top management shall make sure that responsibility and authority for each role that matters to the privacy information management system are allocated and made known across the organization. It shall give specific people the responsibility and authority to keep the PIMS in line with this document and to report to top management on how well the PIMS is performing. Roles a jurisdiction may demand, such as a data protection officer, and the contact points for PII principals and customers, are dealt with by the Annex A controls (A.3.4).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.