EN 50126-2:2017 8.3.1 covers applying a code of practice as the risk acceptance principle and the conditions for its use; the system under consideration applies the method or requirement of this sub-clause where its safety process relies on it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.