Second-party auditing forms part of how suppliers are managed and may serve several ends: assessing supplier risk, monitoring suppliers, developing their QMS, and auditing products and processes. The organization documents criteria for deciding whether second-party audits are needed and what their type, frequency and scope should be, based on a risk analysis that considers product safety and regulatory requirements, how the supplier performs and the supplier's level of QMS certification. Reports of second-party audits are kept. A second-party audit scoped to the supplier's QMS follows the automotive process approach.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.