The practitioner informs the responsible party (and also, if it is a separate party, whoever engaged the practitioner) about fraud and breaches of law or regulation that are known or suspected, about uncorrected misstatements and, where relevant, about internal control deficiencies identified in the course of the engagement.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.