Where sampling is permitted the body runs a defined sampling programme: the central function is audited at least annually before the sampled sites; the required number of sites is audited at least annually; sampled-site findings are assessed for whether they reveal a system-wide deficiency affecting other sites, and if so corrective action is implemented accordingly; organisations with 20 or fewer sites have all sites audited. The body enlarges the sample or stops sampling when the FSMS does not show it can achieve its intended results.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.