The audit team prepares the report under the lead auditor, who answers for its accuracy and completeness. It goes out within the period agreed; if that is not possible, the auditee is told in writing why it is delayed.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.