Before an on-site visit, including one by a third party the firm appoints such as an auditor, the firm ensures the CSP is given prior notice within a reasonable period stating the location, purpose and participating personnel, unless early notice is impossible because of an emergency or crisis or would make the audit ineffective.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.