The organization evaluates and communicates internal control deficiencies in a timely manner to those parties responsible for taking corrective action, including senior management and the board.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.