Where the site holds certification, it must make sure its announced or blended announced recertification audit happens no later than the due date shown on its certificate.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.