All required documented information is controlled; the purpose of document control is to ensure the organization creates, maintains and protects documents in a manner suitable and sufficient for implementing and operating the BCMS, and the focus should be on that purpose rather than on building an elaborate document control system. Examples of protection are preventing compromise or alteration of documents without proper authorization and their accidental deletion; different levels of access and their combinations can be provided (view only, view and change, internal use), and the organization may classify its documented information by sensitivity (restricted, confidential, protected), which can be needed for example for continuity solutions concerning disruption of internal working arrangements or where plans and procedures contain commercially sensitive information.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.