The institution keeps the assessment results and the documentary evidence of how each control principle is met: policies and procedures, the final assessment report, working papers and assessment documentation. The HKMA may validate results and process on a sample basis in its ongoing supervision, and an inadequate process or non-factual result feeds its overall supervisory assessment; SPM TM-C-1 (3.6.1) lists reviews of C-RAF results among its supervisory tools.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.