A provider's quality plan can give the organization and the provider a shared view of how the requirements will be satisfied. The organization should settle how much monitoring of the provider's performance it needs, for example continuing oversight, acceptance checks, assessment or audit. The choice can rest on the nature and scope of the case, the risks attached to it, what the provider is capable of, and the knowledge and expertise the requesting organization itself holds. A shared understanding matters most where the case carries high risk and complexity: it gives the organization grounds for trusting the provider's performance and gives the provider a channel for raising possible problems. Such a relationship can help with making roles clear, including those of any independent assessors the organization uses; keeping shared information and intellectual property confidential; agreeing effective ways and responsibilities for communication; and dealing with supply chain and contract issues.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.