The purpose of the ISMS is to keep information in its scope confidential, intact and available, and its planning and implementation activities cannot by themselves guarantee that the plans, once realised, meet the information security objectives; ISO/IEC 27001 therefore carries several requirements to evaluate whether the plans and activities are fulfilling those objectives, and measurement is how that evaluation is done.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.