In ISO/IEC 20000-1, problem management finds the root cause of actual or potential incidents to reduce their impact; ISO/IEC 27001 does not use the term but analyses security incidents for patterns and causes, and both standards (10.1) address patterns of nonconformity. In an integrated system, identified problems and known errors can feed the ISMS risk analysis, and problem management can use information from security incident management. The integrated system should define what problem management covers; where the ISMS precedes the SMS, integrating the ISO/IEC 20000-1 problem management requirements into the ISMS can benefit every management system.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.