The auditor examines whether the ISMS is established, implemented, maintained and continually improved in accordance with the standard: the processes and their interactions, the evidence that the system operates as a cycle rather than a set of documents, and the trace from planning through operation to evaluation and improvement.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.