The plan should set out which kinds of audit will be carried out for the case, what they will cover and how deep they will go, and what will be done with their results. Audits can serve several ends: checking that quality plans are implemented and work; checking and confirming conformity with specified requirements; keeping external providers under surveillance; and giving an independent, objective assessment where customers or other interested parties need one. ISO 19011 gives guidance on auditing management systems.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.