Where the QFCC gives an assessment report with recommendations, the entity gives the QFCC a written response, including advice on implementing the recommendations, within the period stated in the report (at least 14 days) (s 17).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.