Per PSD2 Articles 95-96 + RTS: fraud reporting + incident management. Requirements include (a) implement Major Incident Reporting to competent authority within timelines per EBA guidelines + (b) maintain fraud monitoring + reporting to EBA + national supervisor twice yearly + (c) implement operational + security risk management framework + (d) maintain incident response capability + (e) implement business continuity + disaster recovery + (f) integrate with broader operational resilience (DORA alignment).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.