The TSF gives authorised users tools to read and interpret the audit data. Components: FAU_SAR.1 Audit review (specified users can read specified information in a usable form), FAU_SAR.2 Restricted audit review (everyone else is denied read access) and FAU_SAR.3 Selectable audit review (searching, sorting and ordering of the data).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.