Assessors determine the assessment's inputs as ISO/IEC 33002 requires for a Class 1 assessment, which means looking at no fewer than four instances of every process in scope, or at every instance where a process has fewer than four.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.