Documented information required by the records system and by the standard has to be controlled so that it is available and suitable where and when it is needed, and protected from loss of confidentiality, improper use or loss of integrity. The organization has to address distribution, access, retrieval and use; storage and preservation, including legibility; control of changes such as version control; and retention and disposition. Documented information of external origin that the system relies on also has to be identified and controlled.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.