The plan should include, or point to, the design and development plans, take into account the applicable standards, codes, specifications, regulatory requirements and quality characteristics, and set the criteria for accepting design inputs and outputs and how, when and by whom outputs are reviewed, verified and validated; because design and development is complex, guidance should come from suitable sources, the organization's own procedures among them (ISO 9004; ISO/IEC 90003 for software).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.