The assessor records in the controls matrix, for each control, the assessment objects examined and the methods used. The assessment degree (depth, meaning rigour and level of detail, and coverage, meaning scope and sample size) is chosen per control objective using ASD's matrix, giving a basic, focused or comprehensive assessment depending on the highest quality of evidence and the coverage assurance achieved.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.