The practitioner must apply the quality management procedures ASAE 3000 requires, and apply professional scepticism, judgement and assurance skills in planning and performing the engagement, recognising that non-compliance through fraud could exist whatever the practitioner's past experience of management's integrity.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.