The TSF creates and keeps a secure audit trail. Components cover FAU_STG.1 Audit data storage location (where the trail is held, inside or outside the TOE), FAU_STG.2 Protected audit data storage (stored records shielded from unauthorised deletion and from modification), FAU_STG.3 Guarantees of audit data availability, FAU_STG.4 Action in case of possible audit data loss (what happens when the trail approaches a threshold) and FAU_STG.5 Prevention of audit data loss (behaviour when the trail is full, such as ignoring, overwriting or halting).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.