Internal audits should assess how far the management system conforms to the selected criteria and how well it is implemented, effective and efficient, possibly across more than one management system standard and against specific interested party, product, service or process requirements. Audits should be planned and consistent, performed by competent people with no role in the activity being examined, and used to find problems, nonconformities, risks and opportunities and to monitor resolution of earlier findings. Top management should review all audit results for trends that call for corrective action across the organization, and results of second and third party audits should feed corrective actions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.