The controller must involve the DPO properly and in good time, provide resources and access, ensure the DPO takes no instructions on the tasks and has no conflicting duties, not dismiss or penalise the DPO for performing them, and have the DPO report to the highest management level; data subjects may contact the DPO.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.