ISO 19011:2018, 5.4.1 applies: whoever manages the ISMS audit programme sets its extent from the objectives and known constraints; determines the internal and external issues, risks and opportunities that can affect it and builds the responses into the audit work; makes sure audit teams are selected and competent by assigning roles, responsibilities and authorities; establishes the processes for coordinating and scheduling audits, setting each audit's objectives, scope, criteria and methods and selecting its team, evaluating auditors, communicating internally and externally, resolving disputes and complaints, following up and reporting; determines and provides the resources; keeps the documented information and programme records; monitors, reviews and improves the programme; communicates it to the audit client and relevant parties; and asks the audit client to approve it. The clause also says that the guidance of 5.4.1.2 applies, but the published text contains no 5.4.1.2: the English text (as adopted in EN ISO/IEC 27007:2022) and the French edition both pass straight from that sentence to 5.4.2, so the pointer is an editorial slip and 5.4.1 adds nothing ISMS-specific to ISO 19011.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.