Clause 5.1 of ISO/IEC 17021-1:2015 applies as it stands: the certification body is a legal entity, or a defined part of one, that can be held accountable for its ISMS certification work, and has a legally enforceable certification agreement with every client.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.