When a nonconformity occurs the organization shall react to it and, as applicable, take action to control and correct it and learn from it or deal with the consequences; evaluate the need for action to eliminate its causes so that it does not recur or occur elsewhere, by reviewing the nonconformity, determining its causes, determining whether similar nonconformities exist or could occur, and identifying any opportunity that may arise from it; implement any action needed; review the effectiveness of corrective action; and make changes to the system if necessary; documented information shall be retained as evidence.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.