A documented process identifies which processes are outsourced and chooses what kind and how much control to apply in verifying that externally provided products, processes and services conform to internal and customer requirements. It includes criteria and actions for stepping controls and development activities up or down according to how the supplier performs and how risky the product, material or service is. As revised: SI 7 (October 2017): where characteristics or components move through the organization's QMS without being validated or controlled, the organization makes sure suitable controls exist where they are manufactured.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.