Class III hardware elements (complex components such as microcontrollers and ASICs with embedded software or configurability) are not evaluated under this clause alone; they are developed under the standard, treated as SEooC, or their software qualified per clause 12, with the hardware part evaluated as class II. This sits in clause 13, whose stated aim is adequate functional behaviour of COTS or custom hardware elements not developed under the standard, so the risk from their systematic faults is low enough, as an alternative means of compliance with part 5, with suitability for random faults left to the integrator. See the official text for the full requirement.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.