In a type 2 report where internal audit work was used in tests of controls, the part of the report describing the tests and results describes the internal auditors' work and the service auditor's procedures on it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.