At least once a year a licensee reviews all its material cloud computing services and makes sure, where appropriate, that the providers themselves undergo regular audits and tests of their procedures, and that the audit is performed by people with the skills and knowledge to assess the cloud services properly and audit them effectively.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.