The company audits each asset notified as critical national infrastructure annually and provides audits on request; audits may be external by persons meeting the authority's criteria, and where they are internal, the company sends those the authority specifies for external review and provides the review on request (as substituted from 5 December 2024).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.