Identical to IS.I.OR.260: effectiveness and maturity of the ISMS assessed with adequate performance indicators on a predefined calendar basis and after any incident; improvement measures on deficiencies and reassessment of the affected elements.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.