The auditor examines that responsibilities and authorities for information security roles are assigned and communicated, including who makes sure the ISMS meets the standard and who reports on its performance to top management, through role descriptions, organization charts, appointment records and interviews confirming that the named persons know and exercise their responsibilities.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.