Issuers must maintain a system of internal accounting controls sufficient to provide reasonable assurance that transactions are executed with management's authorisation, recorded to permit GAAP financial statements and asset accountability, that access to assets needs authorisation, and that recorded assets are compared with existing assets at reasonable intervals with differences acted on.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.