EN 50126-2:2017 5.2.2 covers how the risk assessment of part 1's phases 2 to 4 is conducted for safety: system definition, hazard identification and classification, selection of the risk acceptance principle and evaluation; the system under consideration applies the method or requirement of this sub-clause where its safety process relies on it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.