The manufacturer determines which software items might lead to a hazardous situation found in the ISO 14971 risk analysis of the device, either because the software itself fails or because a risk control measure implemented in software fails. Applies to classes B and C.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.