The controller records the agreed matters in its data security procedure with reference to the agreement and the provider's own procedure, and monitors and supervises the provider's compliance in proportion to the risk.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.