Each team member should gather and go through the information that bears on their audit tasks and should prepare documented information for the audit, in whatever media suits, for example checklists, details of audit sampling, or audiovisual material. The choice of media should not limit how far the audit activities go, and those activities may change as information comes in. Documented information prepared for the audit, and documented information the audit produces, should be kept at least until the audit is finished, or for as long as the programme requires. Any information that contains confidential or proprietary material, images and audiovisual recordings among it, should be properly protected throughout.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.