Given the technical complexity of cloud services and the jurisdictional questions they raise, the staff who audit them, whether the firm's internal auditors or auditors acting on its behalf, have the skills and knowledge to assess the cloud services properly and perform an effective and relevant audit; the same applies to the firm's staff who review the certifications and audit reports the CSP provides.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.