For software developed before the standard existed, instead of applying clauses 5 to 9 the manufacturer may show compliance of the legacy software through the risk management activities, gap analysis, gap closure and documented rationale set out in clauses 4.4.2 through 4.4.5.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.