The organization shall plan, put in place and keep under control the processes that meeting requirements and carrying out the actions from clause 6 call for, by setting criteria for those processes, controlling them against the criteria and keeping documented information to the extent needed for confidence that they ran as planned; it shall control planned changes, review what unintended changes led to and act to limit adverse effects, and shall make sure outsourced processes are aligned with the knowledge management system and kept under control.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.