Before going ahead, it should be established whether the audit is feasible, so there is reasonable confidence that its objectives can be met. This means considering: whether enough suitable information is available to plan and carry out the audit; whether the auditee will cooperate sufficiently; whether there is enough time and other resources, including access to suitable ICT; and whether events or circumstances at local, regional or world level would disrupt the scheduled audit. If the audit turns out not to be feasible, the audit client should be offered an alternative that the auditee has agreed to.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.