ISO/IEC 20000-1 (8.5.2) requires service design and transition; ISO/IEC 27001 has no direct equivalent, although (as amended) a significant change planned for the organisation or its management system calls for an information security risk assessment under its 8.2 and several aspects are covered by Annex A controls. The integrated system should see that security receives detailed consideration while each new or changed service is planned, designed and moved into operation, including an assessment of the new or changed service's effect on existing information security controls, regardless of whether the service is in the ISMS scope, and it should do the same when a service is removed.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.