Where later monitoring or measurement cannot confirm a process's output, the organization sets arrangements that include, as relevant: the basis for reviewing and approving the process; what must be done to keep the approval valid; approval of the facilities and equipment used; qualification of the people doing the work; the particular methods and procedures for carrying out and monitoring the process; and what records must be kept.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.