A modified version too extensive to count as a minor update may have its certificate renewed by recertification, which runs like an initial certification; the process audit is repeated where it has lapsed or no longer applies. A vendor wanting to reuse SCAS test results from an earlier procedure draws up an Impact Analysis Report following Annex A and supplies it, with every document it references, to the evaluation facility and to the certification body before the evaluation phase begins; the facility takes it into account in the evaluation plan under AIS-N2 chapter 2.6, the certification body decides which earlier results may be reused, and reuse is possible only when the same facility that performed the previous evaluation performs the recertification evaluation. After a positive conclusion the certification body documents the results in an updated certification report and issues a new certificate, renewing the formal validity; the applicant may keep its original certificate number with added version elements.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.