Management prepares and includes in the report a written assertion on whether the system's controls were effective (suitably designed and operating) throughout the specified period to give reasonable assurance, judged against the applicable criteria, that the commitments and requirements were met. There is no point-in-time (type 1) form of a SOC 3 (Guide 1.74, 4.120a).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.