Keeping the system compliant while it is in use is the regulated company's responsibility. It meets it by putting in place suitable operational and system management procedures for handover, support services, monitoring, incidents and problems, CAPA, change and configuration management, periodic review, continuity, security, system administration and records management, with the degree of formality matched to the system, as section 4.3 and the operational appendices explain.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.