The organisation determines which stakeholders are relevant to the SOMS and what they require, and top management sees to it that the interests of stakeholders inside and outside the organisation are identified, weighed and written down, considering stakeholders' risk appetite, the obligations the organisation has accepted and the communities affected by its operations. The organisation then determines the boundaries and applicability of the system to establish its scope, documenting what is covered, including the activities, sites and subcontracted functions within it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.