In planning the FM system, the organization shall take account of the issues identified in 4.1 and the requirements identified in 4.2, and identify the risks and opportunities it must address so that it can be confident the system will deliver what it is meant to, avoid or lessen unwanted effects, secure business continuity and readiness for emergencies, and keep improving. It shall plan actions on these risks and opportunities, bearing in mind that they may change over time, and plan how the actions will be built into and carried out through the FM system processes and how their effectiveness will be judged.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.