Regardless of the risks assessed, the practitioner designs and carries out detailed tests or analytical procedures on the subject matter, unless the subject matter is internal control.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.