The asset owner shall have an ISMS, or integrate the IACS security program with the organization's ISMS, so that the IACS SP sits inside a governed management system rather than as a stand-alone technical effort; the 2024 edition's foreword says its requirements were revised to eliminate duplication of an ISMS, which is why this is one requirement rather than a clause set.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.