Where national regulators set minimum test requirements such as fairness across demographics, resilience to attacks or sector-specific conditions, these apply in addition to the scheme clause, the conformity assessment body records in the agreement which national or regional requirements were applied, and the scheme keeps a record of approved national requirements in supplementary documents. Each test plan records objectives and scope, methods and their justification, sample sizes and demographics, acceptance criteria, handling of attack vectors and any national requirements applied; results go into a test report retained by the body for the independent evaluation review, and the certificate and schedule state the accuracy and indicator achieved and any limitations of testing.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.