The report states that the auditor's role is to give an opinion, grounded in the examination, on management's assertion rather than directly on the subject matter. (AT-C 205 .63, Guide Table 4-5)
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.