The controller and, where applicable, the processor must adopt the technical, organisational and security measures needed to protect personal data against alteration, loss, unauthorised processing, consultation or access; recording personal data in files lacking technical integrity and security conditions is prohibited; data providers, SICs and subscribers must control credit-history data against alteration, loss and unauthorised access; SICs must protect their databases against natural risks (accidental loss, disaster) and human risks (unauthorised access, covert use, computer viruses).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.