The areas of production or service provision subject to change control include changes in organisational structure, key or essential personnel, critical providers, design, and the management system. The organisation notifies customers where changes affect the products or services to be delivered, reviews the changes that follow from risk and opportunity assessments and from corrective actions, and, when specified, tells the customer how changes affect residual or new risks.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.