ISO 19011:2018, 6.2.2 is followed (confirming channels and authority, providing objectives, scope, criteria, methods and team composition, requesting planning information including the auditee's risks and opportunities, determining applicable requirements, agreeing confidentiality and information security, arranging the audit and any observers and guides), and where needed, steps should be taken to confirm the auditors hold the security clearance required to access the documented information or other information the audit requires, including confidential or sensitive information.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.