ISO 19011:2018, 6.5.2 is followed (issued within the agreed period, dated, reviewed and accepted, distributed to the parties the programme defines with appropriate confidentiality measures), with a note that where the report is sent electronically, suitable encryption is one way to satisfy its confidentiality requirements; the first paragraph of the former 6.5.2.2 was removed in this edition.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.