Where unannounced audits form part of the body's surveillance, it describes the conditions under which they are organised and conducted and makes them known to certified clients in advance.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.