A provider given an urgent enforcement direction must comply with it whether or not it has yet been confirmed; the duty is enforceable by injunction. The Secretary of State may require a provider not to disclose the contents of a designated vendor direction or the existence or contents of a contravention notification without permission, and may require any current or former provider to provide, generate, collect, retain or analyse information reasonably required for the designated vendor functions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.