Before ICT is used, the body being audited or assessed and the body performing the assessment agree to its use, in keeping with the applicable measures and regulations on information security and on data protection.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.