Procedures confirm, whenever requested, that the production copies of critical control program components are identical to those the regulator approved: signatures are gathered from production by a regulator-approved process, compared analytically with the approved versions, and the output stored unalterably with the result for each component, kept in a log or report for 90 days or the regulator's period, accessible to the regulator in an analysable format and included in the records recovered after a disaster; any verification failure is notified to the operator and the regulator as required, and a process determines the cause and makes the corrections or reinstallations in good time.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.