Configuration audits should be carried out following documented information, to establish whether a product or service meets its requirements and matches its configuration information. A functional configuration audit formally confirms that a configuration item delivers the functional and performance characteristics its configuration information specifies; a physical configuration audit formally confirms its physical characteristics. An audit may be a condition of formal acceptance of an item; it does not take the place of other verification, review, testing or inspection, although their results bear on it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.