Assurance lets the organisation show that its claims, processes and procedures credibly deliver against set requirements (that a carbon reduction happened, that efficiency measures saved what was forecast), and shows it and its interested parties how well it is reaching the outcomes it wants; sound governance of its processes and procedures, its information, its impact assessments and its materiality work, done accurately, transparently and responsively, keeps the focus on how evidence and outcomes are presented and makes sure the evidence fits its management practice and everything it states, claims, reports and discloses. An independent, impartial assurance activity takes an evidence-based approach with risk-based sampling to validate or verify the evidence, guided by integrity, impartiality and objectivity, openness, professional competence exercised with due care, professional conduct, independence and responsibility, a readiness to deal with complaints, a risk-based approach and confidentiality. The engagement counts as assurance once its level has been agreed before validation and verification start, through an established assurance programme or a contract, which fixes the scope and the design, time, resources and competence required; the practitioner offers either reasonable or limited assurance, the choice turning on depth of testing, weight of evidence, cost and the credibility sought, and the result is a fair presentation, through validation and verification work, findings, conclusions and reports that are truthful and accurate, significant obstacles included. No auditor will give complete assurance on ESG evidence, which always carries assumptions, conjecture and reasoning, variability and uncertainty; so when preparing data the organisation thinks about the level of assurance obtainable, and where assurance is sought it falls to the organisation to put forward its claims, its evidence and its disclosures and reports in a way that supports the level needed, weighing its own and its interested parties' needs to anticipate what the practitioner will ask for, since reasonable assurance typically demands deeper analysis (tests of controls, evaluation of assumptions, tests of data systems and equipment, not merely a look at an inventory and its data) and more resource and cost. Where reporting schemes and directives recognise standards, conformity to them (ISO 14064-1, ISO 14001 and ISO 50001 among the obvious ones, and product and service standards among the less obvious) strengthens the foundation of evidence-based reporting.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.