The report states management's responsibilities: its commitments and requirements and effective controls to achieve them, providing the assertion, selecting and naming the applicable criteria, and holding a reasonable basis for what it asserts through an assessment of control effectiveness. (AT-C 205 .63, Guide Table 4-5)
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.