The organization plans, carries out and controls the processes needed to satisfy product and service requirements and to put the 6.1 actions into effect. It does so by: settling what products and services must achieve (a 9100 note adds that this involves considering safety of people and product; whether the product can be made and inspected; reliability, availability and maintainability; whether parts and materials are suitable; embedded software; obsolescence; keeping foreign objects out; handling, packaging and preservation; and recycling or disposal at end of life); setting criteria for processes and for accepting products and services (with statistical techniques that may be used for design verification, process control, key characteristics, capability, statistical process control, designed experiments, verification and FMECA); working out the resources needed for conformity and, under 9100, for delivering on time; controlling the processes to those criteria; and deciding, keeping and retaining the necessary documented information. 9100 adds: deciding how critical items will be managed, with the processes and controls that requires, with controls on production processes where key characteristics have been identified; involving people from the functions affected in planning; deciding the process and resources for supporting use and maintenance of the product; deciding which products and services will be bought in; and setting controls that stop nonconforming product from being delivered. Planning output must suit how the organization operates; planned changes are controlled, unplanned changes reviewed, and outsourced processes controlled. 9100 also requires provision of products and services to be planned and run in a structured, controlled way, with events scheduled in a planned order so that requirements are met at acceptable risk within limits of resources and schedule (project or programme management, which may produce a quality plan), and a process for planning and controlling any temporary or permanent transfer of work so that conformity is maintained and the effects and risks of the transfer are managed.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.