The organization should audit its IRBC at planned intervals to determine whether the arrangement conforms to its own requirements and to this document and is effectively implemented and maintained, with auditors independent of the activities audited, findings reported to management, and corrective actions tracked to closure.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.