The controller must develop internal systems for the effective management of personal data and for reporting any breach of the measures protecting it; the NCGAA privacy-by-design guideline calls this the personal data management system (PDMS) that runs the controller's PDPPL compliance programme and must include the ability to report breaches to individuals and to the NCGAA (article 14).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.