A data controller is accountable for complying with the measures that give effect to the principles in Part Two. The principle makes the controller answerable for outcomes, so it needs named ownership and a means to show the other principles are working, which paragraph 15 then spells out.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.