A processor must adhere to the controller's instructions and assist it to meet its obligations, taking into account the nature of processing and the information available: by appropriate technical and organisational measures, insofar as possible, for responding to consumer rights requests; by helping with security of processing and with notification of a breach of the security of the system; and by providing the information the controller needs to conduct and document data protection assessments. Controller and processor are each responsible only for the measures allocated to them.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.