The client owns its assessment report and holds (but does not own) its statement, while the CAB answers for the data in the report and owns the statement data. The report, plan, additional documentation and statement are uploaded to FSSC within 28 days of the decision and no later than two months after the last assessment day, and a CAB quality control process checks completeness, timeliness, validity, accuracy and consistency between what FSSC receives and what the CAB holds.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.