In line with 5.2 the organization should express its information needs as its own questions on how information security performs and how effective the ISMS is, and express its measures in terms of those needs; the analysis of monitoring and measurement results then yields the data that satisfy the needs (see Annex A), and evaluation means interpreting that data so as to answer the questions the organization has posed on performance and effectiveness.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.