The organization shall set RTS objectives for the relevant functions and levels. They shall fit the RTS policy, measurable if practicable, take applicable requirements into account, be monitored, communicated and updated as appropriate, and documented information on the objectives and targets shall be retained. When establishing and reviewing them the organization shall weigh the risks and opportunities it identified (6.2), its RTS performance factors and their elements and criteria (6.3) and its management capability, and shall consider the technology open to it, its financial, operating and business needs, and what interested parties think. In planning how to meet them, it shall decide the actions, the resources needed, who is responsible, the completion date and how results will be evaluated; action plans shall be written down and reviewed whenever needed (A.6.3 gives an example target hierarchy).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.