Management maintains a change control process for the request, decision, approval or rejection, testing and implementation of changes with confidentiality, integrity, availability and resilience as its goal, formal in proportion to the risk of the change, defined in policies, standards and procedures with roles for the sponsor, change manager, quality manager, information security manager, auditor, administrators, user support and users, supported by change logs, access controls, version control, change documentation with risk assessments, training, and conversion plans coordinated with conversion partners and stakeholders.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.