The entity must document and implement an ICT asset management procedure that sets the criteria for assessing the criticality of information assets and ICT assets supporting business functions. The criticality assessment must consider the ICT risk to those business functions and their dependence on the assets, and how a loss of confidentiality, integrity or availability of the assets would affect the entity's business processes and activities.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.