The service auditor's responsibilities are substantially those of a SOC 2 examination: deciding whether to take on or keep the engagement, agreeing its terms, reaching an understanding with management that it will provide a written assertion, setting an overall strategy and performing risk assessment procedures (Guide 2.195).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.