The report states that the service auditor must be independent and meet its other ethical responsibilities under the relevant requirements for the engagement. (AT-C 205 .63, Guide Table 4-5)
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.