A fully implemented process based on risk must review manufacturers and packers on an ongoing basis against defined criteria such as complaints, test results, alerts from regulators and customer rejections. Questionnaires are reissued at least every 3 years, suppliers must report significant changes in between (including to certification status), and records of the review are kept.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.