Where a Data Security Officer is required or appointed, the officer reports directly to the database manager, an active manager of the controller or processor, or a senior official reporting to the manager; prepares the data security procedure for the controller's approval; prepares and implements a compliance monitoring plan and reports findings; holds no conflicting role; any extra tasks are clearly defined; and the controller allocates the necessary resources.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.