Where the auditor learns of the noncompliance, fraud or uncorrected misstatements that may affect user entities, the auditor determines whether the affected user entities have been told and, if management refuses to tell them, takes appropriate action.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.