Under ISO/IEC 33002 the assessment produces two kinds of output, the assessment records and the assessment reports; ISO/IEC TS 33030:2017 Annex A describes what each contains.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.