The auditor examines how the organization determined the interested parties relevant to the ISMS and their information security requirements, including legal, regulatory and contractual obligations: the register of parties and requirements, its currency, and the trace from those requirements into the risk assessment, the controls and the compliance evaluation.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.