The PIA report should follow a structure covering the scope of the PIA (7.3), the privacy requirements (7.4), the risk assessment (7.5), the risk treatment plan (7.6), the conclusion and decisions (7.7) and, where published, the public summary (7.8), the threshold analysis result and terms of reference being recorded here per 6.2.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.