The risk assessment should: confirm the change is necessary and supported; examine options to make sure the right solution has been found and that it will eliminate or minimise risk so far as is reasonably practicable; consider whether the change is temporary or short or long term, what it costs and over what timescale; weigh how significant and how large the change is, including whether this process applies at all, so that the detail and method of the assessment match the risk; consider risks to interfacing systems, processes and procedures including third-party risks; use risk management tools suited to a deep understanding of the change, its effect on current activities, on operational interfaces and on the safety management system, which can call for quantitative techniques; include human factors, operations and the environment; make sure that the hazards, singly or cumulatively, do not raise overall risk without controls, since a change shall not bring greater safety consequences with it; compare risk before and after the change; and recognise where only type-approved items may be used, as in signalling and other safety-critical systems.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.