The organization sets how each software unit will be verified, in strategy, method and procedure, and where testing is the method, it evaluates whether the test procedures are adequate. Applies to classes B and C.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.