The organization has to plan, implement and control the records processes needed to meet the requirements and to carry out the actions decided under 6.1. Planning means setting the criteria for each process, deciding what resources it needs and how it will be controlled, and then keeping it under control in practice. Where a process is outsourced or run on a shared system, the organization still has to control it, because accountability for the record does not move with the supplier.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.