The company must have a written procedure for approving suppliers, and the manufacturer or processor of every traded product, at the outset and on a continuing basis. Approval rests on a risk assessment that covers what the product is and its risks, customer requirements, the legislation of the country where it is sold or imported, its source or origin, how open it is to adulteration or fraud, risks in the supply chain, and the supplier's track record.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.