External assurance providers add assurance where legislation or regulation requires it to protect stakeholder interests, or where management and the governing body ask for it to supplement internal sources.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.