The controller retains securely for 24 months the data generated under regulations 6(b), 8 to 11, 14, 15(a)(4) and 16, and for medium and high levels backs it up so it can be restored; medium and high levels document routine backup and restore procedures (restores approved by the database manager) and document restorations in incident records; high level keeps the backup and procedures so integrity and restoration are assured.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.