The organization should determine the scope of ICT services that the objectives apply to, tying each critical service, its components and its dependencies to the objectives set in 8.1.4, so that every element needed to meet an objective is inside the arrangement and elements outside it are recorded as out of scope with the reason.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.