The project's quality management system should be documented, kept current and contained in, or cited by, a quality plan for the project. That plan should name the activities and resources needed to achieve the project's quality objectives and should form part of, or be cited in, the project management plan. When specifying and preparing the plan, each of the two organizations (originating and project) should apply risk-based thinking to the quality management system processes that bear on the project objectives, dealing with risks and opportunities in the risk processes of the project (clause 7.7) and also in planning and support processes. Under a contract the customer may set requirements for the quality plan, but these should not narrow the scope of the plan the project organization actually uses. Guidance on quality plans is in ISO 10005.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.