The auditor relies on information the service organisation generates only after judging whether it is reliable, by getting evidence that it is accurate and complete and that it is precise and detailed enough, as section 205 requires.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.