The Controller cooperates with the Competent Authority in supervising the Law and takes the steps the Authority refers to it (Law 30(3)); the Authority may request documents and information, use monitoring tools including a national register of Controllers, and charge for services (Law 30(4)); it issues the rules for who must register in the National Register of Controllers (IR 34). SDAIA was designated the Competent Authority.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.