Periodic audits are arranged to establish whether the management system and its elements exist, are adequate and are effective at protecting workers and preventing incidents. An audit policy and programme fix auditor competency, scope, frequency, methodology and reporting. Each audit evaluates the system's elements, or a suitable subset: policy, worker participation, responsibility and accountability, competence and training, documentation, communication, planning and implementation, prevention and control, change management, emergency arrangements, procurement, contracting, performance monitoring, investigation, audit, management review, preventive and corrective action, continual improvement and any other relevant criteria. The audit concludes whether the elements implemented deliver the policy and objectives, promote full worker participation, respond to performance evaluation results and earlier audits, enable legal compliance, and serve continual improvement and best practice. Auditors are competent people, internal or external, independent of the activity audited; results and conclusions go to those responsible for corrective action; and, as appropriate, workers take part in choosing the auditor and in every stage of the audit including analysis of results.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.