The organisation keeps improving how suitable, adequate and effective the SOMS is, drawing on the policy, the objectives, audit findings, analysis of the events it monitors, corrective and preventive action and management review. It sets up a written programme for managing change in its security operations so that internal or external changes affecting the organisation are reviewed for their effect on the system and any new critical activities are brought in, and it monitors, evaluates and exploits opportunities for improvement, eliminating the causes of potential problems, with actions matched to the impact of the problem and the organisation's obligations and resources, taken without undue delay and assessed for their effect on quality of operations.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.