The SOMS includes the documented information the standard requires and what the organisation judges necessary for the system's effectiveness. When creating and updating documents the organisation ensures proper identification, format, review and approval; it keeps records demonstrating conformity; and it controls documented information so that it is available, suitable and protected, addressing distribution, access, retrieval, use, storage, preservation, change control, retention and disposal, with procedures to approve documents before issue, review and update them, identify changes and current revisions, keep them legible and identifiable, control external documents and prevent unintended use of obsolete ones.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.