Where the assessor cannot obtain sufficient evidence, the limitation and its impact are documented in the report and the affected controls are marked accordingly in the controls matrix.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.