The controller must entrust the DPO at least with informing and advising the controller, processors and staff, advising on DPIAs and monitoring them, cooperating with and acting as contact point for the Commissioner, and monitoring compliance with Part 3 and data protection policies, including assigning responsibilities, awareness, training and audits, having regard to risk.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.