Before the three-year cycle expires a recertification audit reassesses the item against the scheme, covering the updated practice statement and governance records, indicators of effectiveness from fresh test evidence, changes to scope, boundaries or contexts, and conformity with any new or revised international or national requirement; where continuous monitoring shows conformity has been sustained, the conformity assessment body may apply risk-based sampling to reduce confirmatory testing.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.