A controller must take reasonable measures to establish, implement and maintain administrative, technical and physical data security practices protecting the confidentiality, integrity and accessibility of personal data and securing it during storage and use from unauthorised acquisition, appropriate to the volume and nature of the data.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.