A defined process selects, approves and monitors suppliers, and the process is justified by hazard assessment that weighs the risk to the final product. It assesses whether each supplier can satisfy the specified quality and food safety criteria and describes how suppliers are assessed, for example a site audit before materials are accepted, suitable third-party certification, or performance monitoring to keep approval current, where monitoring covers conformity to specifications, fulfilment of certificate of analysis requirements and audit outcomes.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.