The organisation sets the boundaries and the applicability of its system, taking the issues from 4.1 and the requirements from 4.2 into account, and keeps the scope as documented information. The scope statement has to be a factual and representative description of the processes and operations inside the boundary and must not be worded so that interested parties are misled about what is covered.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.