The stated control objectives are reasonable for the services and the classes of transactions and are those that probably matter to how user entities control their financial reporting; the report states the description does not include aspects of the system not likely to be relevant to it, and objectives set only for marketing or operational purposes weaken the report's use.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.