In planning the QMS, the organization takes account of the issues in its context and the requirements of interested parties, and works out which risks and opportunities need attention so that the QMS can be relied on to deliver what it is meant to, so that good effects are strengthened and unwanted ones avoided or lessened, and so that improvement happens. It plans actions on them, decides how those actions are built into QMS processes and how their effectiveness will be judged, and keeps the actions proportionate to the possible effect on conformity. The 9100 notes list ways of dealing with risk and point out that opportunities may open up new practices, products, markets, customers, partnerships and technologies.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.