The assessor understands the previous IRAP assessment report for the system and outlines its relevant findings. When assessing new services or changes to an assessed system, the assessor identifies the changes and the altered controls or workflows, determines their impact on implemented controls, reviews previously assessed controls the change may affect, assesses the change and reports it as a delta report, an addendum or a new report as agreed.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.