6.6.1: for documented information that applies to the case, the plan should say how it will be identified, who will review and approve it, how its distribution and access to it will be controlled, and how it will be kept up to date and protected. 6.6.2: the plan should specify which documented information is to be kept as evidence that requirements were met, for example inputs to the plan, reviews of design and development, results of inspections and tests, outputs of process monitoring and measurement, work or service orders, drawings, meeting minutes and assessment and audit reports. Points to settle: how, where and how long the evidence is kept; which customer, statutory and regulatory requirements apply and how; how retained evidence is guarded against unintended change and kept retrievable when needed; which documented information is handed to the customer, at what time and through which channel; and, where relevant, the language, format and media in which it is supplied.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.