A controller that processes the personal data of more than 1,000 data subjects in a six-month period must submit a soft copy of the summary of its 4.1(5) audit to the Agency.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.