ISO 19011:2018, 7.4 applies with no ISMS-specific addition: each evaluation should use at least two of the methods in the 19011 table (review of records, feedback, interview, observation, testing and post-audit review), recognising that not every method suits every case and that their reliability differs, so that the combination gives an objective, consistent, fair and reliable result.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.