At planned intervals the organization shall carry out internal audits that tell it whether its EMS satisfies both the requirements the organization itself has set for it and those of this document, and whether it is actually implemented and kept up effectively.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.