The assessor should identify the stakeholders who matter for the PIA (PII principals or their representatives, internal functions, suppliers and processors, regulators where appropriate), decide how and when to involve them in proportion to the scale set under 5.4, and record the consultation for 7.3.4 of the report; consulting stakeholders is built into the definition of a PIA (3.7) and the held note to 3.14 calls consultation integral to it. The Bavarian DPA's mapping ties this clause to identifying and involving the actors and the people affected (controller, processors and sub-processors, insured persons and other drivers in its example).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.