The certification body establishes an audit programme for the full certification cycle under ISO/IEC 17021-1:2015, 9.1.3 (two-stage initial audit, surveillance audits in years one and two, recertification in year three), taking account of the AI systems, technical areas and risks within the AIMS scope when planning what each audit covers.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.