The organisation plans, implements and controls the processes needed to meet its requirements and carry out its planned actions, setting criteria for the processes and controlling them to the criteria; it identifies the activities tied to significant risks and keeps them consistent with its policy, risk assessment, objectives and legal obligations; it maintains documented procedures wherever their absence could cause departures from the policy, objectives and targets; and it controls planned changes, reviews the consequences of unintended ones and acts to mitigate adverse effects.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.