For each hazard requiring control, the control points must be reviewed to identify the critical ones, using a logical approach such as a decision tree; CCPs are those needed to prevent, eliminate or reduce a hazard to an acceptable level, and where control is necessary at a step but absent, the product or process must be modified at that or an earlier step to provide it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.