Release and deployment management under ISO/IEC 20000-1 (8.5.3) should include the relevant information security considerations; otherwise changes to live systems can introduce vulnerabilities, especially if the possibility of malicious action is ignored. The risk rises during emergency releases, where different procedures under time or resource pressure may defer some activities until after deployment. Release and deployment can be improved by selecting relevant Annex A controls of ISO/IEC 27001.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.