Contracts with cloud service providers include an exit plan requiring the provider to give the MCDA an easy and economical way to extract its data; a requirement to sanitise data from storage media, revoke the provider's electronic and physical access rights and return or securely purge assets provided to the provider; a non-disclosure agreement, recommended before any service is provisioned; and full disclosure of breaches of regulated information with support in reporting it to the Data Protection Commissioner's office.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.