Identical in substance to IS.I.OR.235: contracted ISMS activities comply with the Regulation and work under the organisation's oversight, their risks are managed, and the competent authority can access the contractor on request.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.