Actions to address risks and opportunities are proportionate to how far they could affect product and service conformity. The processes the organisation establishes for managing risks and opportunities define the techniques and tools, and their application, for identifying and assessing risks and opportunities and for preventing and mitigating risks; identify the relevant interested parties; identify where risk and opportunity come from, what they affect, and the events with their causes and possible consequences; analyse each by determining consequences and likelihood; evaluate them and develop controls; and apply risk treatments and opportunity realisation plans. Documented information is maintained and retained to support and demonstrate this management; 8.1 adds operational requirements and the ISO and IEC risk management standards provide guidance.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.