Cryptographic modules used for the purpose of the Regulation are in line with consensus standards; where they are not, the manufacturer justifies their use. The Interpretation Document: a consensus standard may be international or a commonly used national one such as FIPS, and the manufacturer explains whether each algorithm or measure complies with a current consensus standard and why it adequately mitigates the identified risk.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.