The controller documents every event raising concern about integrity, unauthorised use or excess of authorisation, as far as possible from automatic records; the procedure sets handling by severity and sensitivity including revoking access and reporting; medium-level databases review incidents at least annually and high-level at least quarterly, considering procedure updates.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.