Top management governs and controls the ISMS organization in the normal way, but that organization stretches across several entities. Examples are a larger entity steering a group whose members share one information security context for some activities, such as collecting, processing, storing and using personal data, or several governing bodies relying on one ISMS that is offered as a service to many customers. The 7.3 governance processes stay the same, and the security objectives of the ISMS organization should fit the shared business objectives that hold the member entities together.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.