The service organisation gives the auditor access to all information it knows to be relevant to the description and the assertion, including service level agreements, any further information the auditor requests, and unrestricted access to the people from whom the auditor needs evidence; this is a precondition of every attestation engagement under section 105 and a stated responsibility under ISAE 3402.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.