The RSE licensee must implement satisfactory internal audit procedures and external audit arrangements to ensure compliance with the risk management framework and to allow it to attest that its risk management and internal control systems are operating effectively and are adequate.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.