Internal audit, which in addition to Appendix A should ensure the framework complies with the Guidelines and suits the bank's size, complexity and risk profile, should maintain a complete and current inventory of the bank's material processes, product lines, services and functions and assess their risks, including emerging risks, as the basis for the audit plan.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.