In the extremely rare case where a deviation found in a sample is regarded as an anomaly, and there is no other control that allows the auditor to conclude that the control objective was met, the service auditor performs further procedures that give a high degree of certainty that the deviation does not represent the population as a whole.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.