To set the scope of the system, the organization shall decide its boundaries and where it applies, taking into account the issues identified under 4.1 and the requirements identified under 4.2 b). The resulting scope shall be kept available as documented information.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.