In planning how internal audit work will affect its own procedures, the service auditor weighs what the particular work involves and how far it goes, how much it matters to the auditor's conclusions, and how subjective the assessment of the evidence supporting those conclusions is.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.