Each Commonwealth entity must have an audit committee, and it is the accountable authority's duty to make sure of it. The committee's make-up and its functions must follow whatever the rules prescribe: under the PGPA Rule that means advising on financial reporting, performance reporting, the system of risk oversight and management and the system of internal control, a written charter, minimum membership and independence standards, and a list of persons who may not serve.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.