The plan should specify: the critical characteristics of processes, products and services supplied from outside that can affect the case; how those characteristics are passed on to the external providers; how providers are evaluated and controlled, including alternative or supplementary providers when needed; what is required of provider quality plans or other plans, and references to them, where appropriate; how requirements applying to externally supplied products and services, legal and regulatory ones included, will be satisfied; and how the organization will check that externally supplied products and services meet their specified requirements.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.