Team members should review the documented information of the management system concerned in order to learn about the auditee's operations and the risks inherent in them, to get ready for the audit work and prepare the working documents it needs, and to form a picture of how much documented information exists, so they can gauge whether the system is likely to conform to the criteria and spot areas of concern, such as gaps, omissions or contradictions. Documented information here covers management system documents and records together with reports of earlier audits. The review should reflect the organization's context, size, nature and complexity and the risks and opportunities linked to them, together with the audit's scope, criteria and objectives.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.