Population lists, system reports, logs, tickets and access listings that the auditor uses as evidence are shown to be accurate and complete and sufficiently precise and detailed, because the auditor must evaluate their reliability before relying on them; an unreliable population list is a scope limitation on every control tested from it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.