To include a modified version in an existing certificate the applicant submits an application to the certification body with an Impact Analysis Report per Annex A and all the documents it references. Where the changes are not confined to defect corrections, the applicant must also obtain a written report from the test laboratory that did the underlying evaluation, drawn up under AIS-N2 chapter 2.6, giving the laboratory the IAR and its annexes and any further information and evidence it asks for; that report is submitted with the application. The certification body weighs the IAR, the laboratory's assessment where applicable, and the overall extent of the changes against the originally evaluated product, includes the update in the certificate if assurance is unchanged, otherwise lets the applicant address its concerns, and informs the applicant of its decision by notification.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.