A controller or holder of five databases subject to registration or notification, a public body, and a bank, insurer or credit rating company must appoint a suitably qualified Data Security Officer responsible for securing the data; a person convicted of an offence of moral turpitude or under the Law may not be appointed. Failure attracts a sanction of 2 shekels per data subject (4 for sensitive information).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.