Show, and check, that processing satisfies the data protection and privacy safeguarding requirements, through audits held periodically using internal or trusted third-party auditors; have internal controls and independent supervision mechanisms that assure compliance with privacy law and with the organization's own policies and procedures on privacy, data protection and security; develop and maintain privacy risk assessments to evaluate whether programme and service delivery initiatives involving PII comply; and, where supervisory authorities are responsible for monitoring, cooperate with them and observe their guidelines and requests.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.