With the programme set up and its resources decided, those managing it should put in place the operational planning and coordination of everything it involves, namely: telling interested parties about the parts of the programme that concern them, its risks and opportunities included, and updating them on progress at intervals through the channels set up for this; setting the objectives, scope and criteria of every audit; choosing the auditing methods; coordinating and scheduling the audits and related activities; making sure each team has the competence required; supplying the resources needed for each audit and for the programme as a whole; making sure audits follow the programme, and handling operational risks, opportunities and issues when they come up; making sure documented information about audit activities is managed and kept in good order; setting and applying the operational controls used to monitor the programme; and reviewing the programme to find ways to improve it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.