Network traffic, data flows and event logs from key systems, applications, network and security systems are collected, analysed and monitored to detect intrusion attempts, leakage attempts and fraud; criteria and thresholds define what counts as anomalous and follow-up investigation happens promptly (Standards for Securing Personal Information Article 6).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.