Guidance that a documented procedure sets the controls for: distributing documented information; giving access to it, including who may view it and who may change it; approving documents as adequate before release; reviewing, updating where needed and re-approving them; marking changes and the current revision; making the right versions of applicable documents available where they are used; keeping documents readable and easy to identify; identifying outside documents the organization needs to plan and run the BCMS and controlling where they go; stopping obsolete documents being used by mistake and marking any that are kept; setting how long documents are kept and archived; and guarding confidential information against disclosure. The organization protects the integrity of documented information by shielding it from careless handling, keeping a dependable backup, limiting it to authorised people and guarding it against damage, decay and loss; and it shows that it knows the laws and regulations on keeping documented information, and keeps proof that it complies.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.