The competent authority must assess the effectiveness and maturity of its own ISMS with adequate performance indicators on a predefined calendar basis and after any incident, take the improvement measures needed on deficiencies to stay compliant and keep risks acceptable, and reassess the affected elements.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.