The organisation maintains documented information defining its processes and controls for the ISO 9001 requirements on distribution, access, storage, preservation, change control, retention and disposition of documented information. When external specifications, with their addenda, errata and updates, are used to design or manufacture a product or service, it maintains and retains documented information on the practices for integrating those requirements into the related operating processes; ISO/IEC 27000, 27001, 30301 and 30302 can inform the planning.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.