Those managing the programme should make sure there is an evaluation of: whether audits are happening on schedule and the programme's objectives are being met; how well the audit team members perform, team leader and technical experts included; whether the teams are able to carry out the audit plan; what auditees, audit clients, technical experts, auditors and any other relevant parties say in feedback; and whether the documented information used throughout the audit process is sufficient and adequate. Things that may show the programme needs to change include: changes in what audits find; how effective and mature the auditee's management system has proved to be; how effective the programme itself is; the audit scope or the extent of the programme; changes to the auditee's management system; the standards and other requirements the organization has committed to; organizations in the supply chain; conflicts of interest that have come to light; and what the audit client requires.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.