As part of its assertion, or in an exhibit to it, management sets out the system's boundaries and its principal commitments and requirements, so readers can understand the scope and how effectiveness was judged. Where these disclosures are left out, the auditor would ordinarily restrict use of the report to users who already know them, in most cases only the organisation and its board (Guide 1.74, 4.121, 4.123).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.