The organization should run specific performance evaluation processes to find out whether intended results are achieved, with the frequency and nature of those processes reflecting the types of activity involved. It should: establish the intended results; decide what has to be done to achieve them; choose the evaluation processes, the information sources and the tools (5.3); determine what information is needed, such as inspection results, evaluation outcomes and audit findings, and whether it can be obtained; monitor, measure, analyse and evaluate performance (Clause 8); act on the evaluation (Clause 10); review unintended consequences (6.5.4); and act on issues found in the evaluation process itself and its results (Clause 11).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.