Who does what is defined for passing relevant data back to development, evaluating the collected data to determine whether risk is still reasonable and defining and rolling out measures. Monitoring is continuous, reactive and proactive, and any SOTIF-relevant observation leads to analysis of the impact on the SOTIF argument and its re-evaluation. If the argument no longer holds the risk is evaluated and a decision taken on mitigation, which may need an immediate reaction such as inhibiting the function over the air before a final fix, and longer-term measures that re-run clauses 5 to 12 and lead to a new release.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.