Each year the internal audit programme reaches every critical process and activity tied to the contract, including the contractual requirements and NATO supplements, and takes account of the risk and opportunity assessment. Unless agreed otherwise, deficiencies and findings from internal audits are reported to the GQAR or Acquirer, and records of auditor training and experience are retained. SRD.2: audits need not cite the AQAP but must be traceable to its requirements (against AS9100D 9.2). Base clause: ISO 9001:2015 9.2 (internal audit).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.