A log management procedure covers servers, applications, security and network systems and the logs needed are generated and kept; logs are protected against tampering, theft and loss with minimal access rights; and access records of personal information processing systems contain all legally required items and are kept safely for the required period (PIPA Article 29; Standards for Securing Personal Information Article 8).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.