This table rates the internal audit process, from audits performed reactively after problems or complaints to consistent audits by competent personnel independent of the activity examined, carried out to a plan that identifies problems, nonconformities and risks and tracks closure of earlier findings. The highest level reviews all internal audit reports to spot trends needing organization-wide corrective action and involves other interested parties in audits to surface further improvement opportunities.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.