The organisation establishes, implements and maintains procedures for handling nonconformities and for corrective and preventive action; these define how nonconformities are identified and corrected and how their consequences are mitigated. When a nonconformity occurs the organisation reacts to it, acts to control and correct it and deals with the consequences, evaluates the need to eliminate its causes so it does not recur, implements the action needed, reviews its effectiveness and changes the system where necessary; corrective actions are proportionate to the effects of the nonconformities, and records are kept.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.