The entity is required to set up, keep up to date and document procedures for complying with the legislation, policies, regulatory requirements and directives that apply to it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.