Top management reviews the SOMS at planned intervals to confirm it is still suitable, adequate and effective, including where it could improve and whether the policy and objectives need changing, and documents the results. The review considers the status of actions from previous reviews, changes in internal and external issues, the results of audits and reviews, performance and compliance evaluations, incidents and nonconformities with corrective actions, stakeholder feedback and complaints, the results of exercises and testing, the adequacy of resources and risk treatment, and recommendations for improvement; its outputs include the decisions and actions taken on changing the policy, the objectives and targets and other parts of the system, and on resources.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.