An approved authority must comply with the requirements the regulations prescribe for monitoring its compliance with the Act, such as financial accountability returns, audits and responding to compliance reviews.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.