The company must set up inspection and test procedures, visual, chemical or microbiological and based on risk, for any product that has had some of its processing outsourced.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.