Internal audit gives independent, objective assurance and advice on whether governance and risk management are adequate and effective, using disciplined processes, expertise and insight. Findings go to both management and the governing body to support improvement, and the function may draw on assurance work done by other providers inside or outside the organization.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.