The certification body sets the audit time for each client under ISO/IEC 17021-1:2015, 9.1.4 together with the normative Annex A and the worked examples of the informative Annex B, for the initial audit, surveillance, recertification and special audits, and for clients acting as AI producer, provider or user or in more than one role. Annex A works from concepts that include the number of persons involved in the AI life cycle, adjustment by factors, the auditor day and remote audit methods, with a table for the initial audit; the application inputs certification bodies collect for it include the AI role, the sectors and legal context of the AI use, the complexity of the data and of the IT infrastructure, outsourcing, how confidential information is handled and the share of personnel doing similar work. The time set and every adjustment are recorded with their justification.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.