Where the applicant uses outsourced processes, the certification body determines and documents whether the audit team needs specific competence to evaluate the client's control of those outsourced processes.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.