Clients implement continuous monitoring suited to their item and, where technically feasible, automate monitoring of classification accuracy and error rates, demographic outcome error parity, resilience to attack vectors such as replay or injection detection alerts, security and privacy incidents, and operational performance (uptime, throughput, response times); the client reviews the outputs and produces them at surveillance and recertification, and may connect to ACCS continuous use monitoring tools. Clients tell the conformity assessment body about every major change and every material incident; the body decides whether an intervening audit, possibly limited to the affected area, is required, and such audits may also follow regulatory findings, substantiated complaints or adverse media, or the lapse of external certifications relied on.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.