When deciding what competence an audit calls for, whether to carry it out or to take part in it, the knowledge and skills of the auditor should be considered in relation to: how large, complex and what kind of organization it is, and what products, services and processes it has; auditing methods, including how emerging technology can make auditing easier or be the subject of the audit where processes rely on it; the management system disciplines involved and how complex the systems to be audited are; methods for assessing risks and opportunities; the programme's objectives and extent; how uncertain it is that the objectives will be reached; and any further requirements of the audit client or interested parties. This should then be compared with the knowledge and skills set out in 7.2.3.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.