Internal audits at planned intervals show whether the management system conforms to the provider's own requirements, including the PT activities, and to the standard, and is effectively implemented and maintained. The provider plans, establishes, implements and maintains an audit programme (frequency, methods, responsibilities, planning requirements, reporting) that weighs the importance of the PT activities, changes affecting the provider and earlier audit results; ensures auditors know PT activities, auditing and the standard and are independent of what they audit wherever resources permit; defines criteria and scope per audit; reports results to relevant management; implements corrections and corrective actions promptly; and retains records of the programme and results. ISO 19011 guides auditing.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.