The bank has an IS Audit Policy describing mandate, purpose, authority, audit universe and audit periodicity, approved by the ACB and reviewed at least annually.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.