Information services and personal information processing across the scope are analysed, business procedures and flows documented (personal information flow tables and diagrams), and reviewed periodically as services and assets change so documents stay current.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.