The report describes significant inherent limitations: any system of internal control can fail through human error or circumvention, controls may not always operate effectively, and projecting conclusions to future periods is risky because conditions or compliance may change. (AT-C 205 .63, Guide Table 4-5)
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.