The institution evaluates the adequacy of each provider's internal and security controls, ensures the provider adheres to appropriate policies, procedures and standards, considers internal audits by its own staff or a user group and external audits and control reviews by qualified sources, assesses the provider's internal audit capability and its external auditors' training, conducts a regular comprehensive audit of the relationship covering the controls that protect against irregularities and manipulation, verifies that the client internal controls a third-party review assigns to it are working, and performs around-the-computer audit techniques such as data controls, proof and batch totals and the further checks the booklet lists.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.