The system includes the documented information the standard requires and whatever else the organization finds necessary for it to work; the amount varies with size, activities, process complexity and competence, and it can be held within other management systems such as compliance, finance, commercial or audit (Annex A.17).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.