The organization must plan, run and control the processes it needs to satisfy the requirements and to carry out the actions decided under 6.1: it sets criteria for those processes, manages them against the criteria, and keeps enough documented information to be confident they were carried out as intended. It must manage changes it plans, examine the effects of changes it did not intend and act to limit any harm, and keep outsourced processes under control.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.