Where a nonconformity arises, the organization shall respond by acting to bring it under control and correct it and by dealing with its consequences; decide whether action is needed to remove its causes so it does not happen again or appear somewhere else, by reviewing it, establishing why it happened and checking whether similar nonconformities exist or might arise; carry out whatever action is needed; review whether the corrective action worked; change the FM system where needed; and inform relevant interested parties of the nonconformity and of what was done about it. Corrective actions shall be proportionate to the effects of the nonconformity, and documented information shall be kept on what the nonconformities were, the actions taken and the outcome of corrective action.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.