Because 9.1 b) asks for methods that ensure valid results, and valid results are comparable and reproducible, the organization should collect, analyse and report measures with four points in mind: results from monitoring at different times are comparable only if the ISMS scope and context have not changed; a change in measuring or monitoring method or technique generally breaks comparability, so retaining it can require specific tests such as running the original and the changed method in parallel; where subjective elements enter the method, reproducibility needs specific steps, such as evaluating questionnaire results against defined criteria; and in some situations results are non-reproducible individually yet valid when aggregated.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.