The assessor uses the IRAP assessment report and controls matrix templates provided by ASD (the IRAP Assessment Report Template or the Cloud Security Assessment Report Template), adapting sections as the assessment requires.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.