The organization decides on and takes action to remove the causes of nonconformities that could arise, in proportion to how severe the potential problem is. It does so through a set process that works out which nonconformities might occur and why, judges whether action is needed, decides on and carries out the action, documents it, checks whether it worked, and uses the lessons learned to stop recurrence in similar processes.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.