A wholly-owned Commonwealth company must have an audit committee that satisfies section 17 in the same way as a corporate Commonwealth entity, with the board standing in for the accountable authority: a written charter covering review of financial reporting, performance reporting, risk oversight and management and internal control; at least three members with suitable expertise, none of them company employees except those engaged mainly as committee members; and the board chair, CFO and CEO excluded.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.