Where the management system already conforms to one standard, the main aim should be to fold in the other standard's requirements without any loss of service or weakening of information security, planned carefully in advance with the existing documentation reviewed by a team that understands both standards. The organisation should list the features of the system it already has, at least its scope, structure, policies, planning activities, authorities and responsibilities, practices, relevant processes, procedures, risk management methods, terms and definitions, and resources, and then review how each can be applied in the integrated system.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.