The organisation sets up, implements, maintains and continually improves a SOMS, with the processes it needs and their interactions, in line with the standard; documents the outcomes it wants from the system; builds the principles and commitments of the International Code of Conduct into it; and, where any process or activity within the standard's scope is contracted, subcontracted or outsourced, makes sure that process stays under its control and meets the same requirements.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.