Where the risk assessment finds it necessary for business continuity readiness (NEN-EN-ISO/IEC 27002:2022 control 5.30), arrangements exist for backup certificates from an alternative supplier.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.