ISO 19011:2018, 7.2.4 applies (competence built from a mix of generic auditor training, experience in a technical, managerial or professional role calling for judgement, decisions and communication, education, training and experience in the discipline and sector, and audit experience supervised by an auditor who is competent in that discipline), and ISMS auditors should in addition have knowledge and competence in information technology and information security, which can be demonstrated for example by relevant certifications such as a personnel certification granted under ISO/IEC 17024; each ISMS auditor's professional experience should also contribute to building knowledge and competence in the ISMS field. A note points to ISO/IEC 27006 for further information on the certification of ISMS auditors.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.