The practitioner must plan the engagement so that it is performed effectively, as ASAE 3000 requires, and must consider materiality, as ASAE 3000 requires, when setting what procedures to run, when, and how widely.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.