ISO/IEC 27002:2013, 10.1.1 is augmented for communities: cryptography is a tool for the community itself, since cryptographic techniques such as information rights management can enforce the dissemination rules attached to shared information, so the policy on cryptographic controls covers that use as well as protection in transit and storage.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.