Controllers, collectors and processors protect the integrity of personal data with appropriate technical and organisational measures against loss, damage, unauthorised destruction and unlawful access or processing: identifying foreseeable internal and external risks, maintaining safeguards, verifying them regularly and updating them for new risks, and following generally accepted information security practice and industry rules, including the administrative and technical practices the Office publishes in the Gazette.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.