The organization shall set up, operate and keep up processes for checking whether it is fulfilling its compliance obligations. It shall decide how often that check takes place, carry out the check and act where required, and keep itself informed of, and understand, where it stands on compliance. It shall keep suitable documented information showing the results of each compliance evaluation.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.