Management's policies, standards and procedures cover every step of change management, categorise changes by severity with corresponding approvals and responsible staff, working groups or committees, track metrics such as implementation time, success rates and planned against unplanned changes, preserve confidentiality, integrity and availability, incorporate segregation of duties and monitoring, and run the process from a documented request with business justification, impact analysis and timing through evaluation, approval, testing, implementation, verification, documentation and closure as the booklet sets out, for internal infrastructure and third-party provider changes alike.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.