When clicking on this bar, you will be able to see the gaps within the category.

Please specify, whether the IT-system is owned/supplied by a data recipient outside of the organization (1). If it is owned by data recipient, you must specify the data recipient.