The governing body must ensure effective governance structures and processes are in place and that objectives and activities match stakeholders' prioritized interests. It delegates responsibility and resources to management so objectives are met within legal, regulatory and ethical expectations, and it sets up and oversees an independent, competent internal audit function.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.