When a nonconformity arises, complaints included, the organization: acts to contain and correct it and to handle what follows from it; assesses whether its causes need removing, by reviewing and analysing it, establishing the causes (under 9100, including causes linked to human factors) and checking whether similar nonconformities exist or might arise; carries out the action needed; checks that the action worked; brings risks and opportunities up to date; and alters the QMS where required. Under 9100 it passes corrective action requirements on to any external provider responsible for the nonconformity, and takes particular steps when corrective action is late or ineffective. Actions suit the effects of the nonconformity. 9100 requires the processes for managing nonconformities and corrective action to be kept as documented information, and records are kept of each nonconformity, the actions taken and the outcomes.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.