The team should review the auditee's relevant documented information to judge how far the system, as documented, conforms to the criteria, and to collect information that supports the audit work. This review may be combined with other activities, such as observation and interviews, and may go on throughout the audit, provided the audit remains effective. If adequate documented information cannot be supplied within the time the audit plan allows, the team leader should tell both the programme manager and the auditee, and a decision should be taken on whether the audit carries on or is suspended until the concerns are settled.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.