The body applies clause 7.1.4 of the base standard: it keeps a process that secures and shows effective auditing, including the use of technical experts where the team lacks category competence.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.