The controller must take all technical and organisational measures necessary to ensure an appropriate level of security to prevent unlawful processing and unlawful access and to safeguard the data. Where another natural or legal person processes on its behalf, the controller is jointly responsible with that person for these measures. Breach of the data security duties is fined TRY 15,000 to 1,000,000 (base amount, revalued yearly) under Article 18(1)(b).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.