The CDR Accreditor may audit an accredited data recipient's compliance with rule 5.12 and its accreditation conditions, and may by written notice require copies of records the Division requires or information from them; the recipient must comply (civil penalty). The Accreditor gives any audit report to the Commission and the Information Commissioner.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.