The organization must set records objectives at the functions and levels where work happens. The objectives have to be consistent with the policy, measurable where practical, monitored, communicated and updated when circumstances change, and the organization has to retain documented information about them. For each objective it plans what will be done, who does it, when it is due, what resources it needs and how the result will be evaluated.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.