The auditor examines whether the resources required to set up, run, maintain and keep improving the ISMS were determined and provided, through budgets, staffing, tooling and the resource discussions in management review.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.