When clicking on this bar, you will be able to see the gaps within the category.

Only relevant persons may have access to personal data. This gap is removed by selecting “Yes” in the system description, when appropriate access division to the system has been implemented based on work related needs. (1)

It must be justified why ‘Division of access to the IT system/information asset’ is not relevant (2).