A relevant entity for a system of national significance that is technically capable may, after consultation and regard to cost and proportionality, be required by a system information periodic reporting notice or event-based reporting notice (each in force for up to 12 months, renewable) to prepare reports of information about the operation of a computer that is, or is needed to operate, the system (not personal information), in the specified manner, form and IT requirements, and give them to ASD at the set times or as soon as practicable after each event. Compliance to the extent capable; self-incrimination is no excuse, with use immunity.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.