The auditee should tell the relevant officials and staff the audit's objectives and scope, appoint one or two people to liaise with the team, provide the resources the team needs for an effective audit, give access to facilities and evidence on request, co-operate so the objectives are met, review the results and see that corrective actions based on the report are carried out.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.