Where the AIMS covers several sites, the certification body applies ISO/IEC 17021-1:2015, 9.1.5 in full, with IAF MD 1 for sampling: one AIMS under a centralized management review; a central function, not outsourced, that controls the AIMS, gathers data from every site and has authority to require change (documentation, management review, complaints, corrective action, internal audit planning, legal requirements); every site legally or contractually linked to that function and inside the internal audit programme; and permanent, temporary or virtual sites performing very similar processes eligible for sampling. The audit time for multiple sites follows Annex A.7.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.