The description identifies the services performed by any subservice organisation and states whether the carve-out method (the subservice organisation's control objectives and controls are excluded from the description and the engagement) or the inclusive method (they are included and the subservice organisation's management provides its own assertion and representations) is used; under the carve-out method the description states the controls the service organisation applies over the subservice organisation's services.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.