The provider must inform OFCOM as soon as reasonably practicable of any security compromise that has a significant effect on the operation of the network or service, and of any unauthorised access, interference or exploitation that puts a person in a position to bring about such a significant compromise. Significance is judged in particular by the duration, the number of users affected, the size and location of the area affected, and the extent to which activities of users are affected.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.