If findings or non-conformities turned up in the product by the evaluation would lead to a negative result, the vendor may give the test laboratory a modified product version that corrects them. In that case the vendor shall draw up an Impact Analysis Report following Annex A that describes the changes and shall supply it, annexes included, to the laboratory and to the certification body alike. Changes that go beyond correcting the identified defects and non-conformities need the certification body's prior approval, and it may ask for additional evidence; the facility decides under AIS-N2 section 2.4.4.2 which SCAS tests must be repeated. The evaluation report must contain both the review of the evidence the audit report specifies and the SCAS test results, because only the combination yields a meaningful certification result.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.