Internal audit, which in addition to Appendix A should ensure the framework complies with the Guidelines and suits the bank's size, complexity and risk profile, should establish a quality assurance program ensuring internal audit's policies, procedures and processes comply with regulatory and industry guidance, fit the bank's size, complexity and risk profile, are updated for internal and external risk factors, emerging risks and improved practices, and are consistently followed.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.