Measuring the fulfilment of ISMS processes and controls and information security performance can bring four major benefits: increased accountability, by revealing processes or controls that are wrongly implemented, missing or not working; better ISMS processes and better information security performance, by quantifying improvements and demonstrating progress toward the objectives; evidence of meeting requirements, as documented proof of fulfilling ISO/IEC 27001, other standards and applicable laws and regulations; and support for decision-making, by feeding quantifiable information into risk management, gauging which security investments, past and present, succeeded or failed, and supporting resource allocation for future ones.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.