Those managing the programme should make sure that: each audit is evaluated for whether it met its objectives; audit reports are reviewed and approved to confirm they satisfy the audit's scope and objectives; the effectiveness of the actions taken on audit findings is reviewed; reports go to the parties decided on beforehand; and any need for a follow-up audit is identified. Where appropriate, audit conclusions and good practices should be shared with other parts of the organization.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.