The service auditor asks the service organisation for written representations that: confirm again the assertion that goes with the description; confirm that it supplied all relevant information and the access agreed; and disclose any of the following it knows of: fraud, noncompliance with laws or regulations, or uncorrected deviations for which it is answerable and which could affect user entities; deficiencies in how controls are designed; cases where controls did not work as described; and events after the period, up to the report date, that could significantly affect the report.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.