Where the agency has an Inspector General under the Inspector General Act of 1978, the IG performs the evaluation or has it performed by an independent external auditor as the IG determines; an agency without such an IG engages an independent external auditor to perform it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.