When a nonconformity occurs the organization must react to it, taking action to control and correct it and dealing with the consequences as applicable; evaluate the need for action to eliminate its causes so that it does not recur or occur elsewhere, by reviewing it, determining its causes and determining whether similar nonconformities exist or could occur; implement any action needed; review the effectiveness of corrective action taken; and change the management system if necessary. Corrective actions must be appropriate to the effects of the nonconformities, and documented information must be retained as evidence of their nature, the actions taken and the results of corrective action.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.