The documented information that the FM system and this document call for shall be kept under control so that it can be found and used where and when it is needed and is properly safeguarded against loss of integrity or confidentiality and against misuse. As relevant, the organization shall deal with: how much information is needed to support the objectives of the demand organization; requirements for information governance; how information is distributed, accessed, retrieved and used; how it is stored and preserved, legibility included; change control; retention and disposition; stopping out-of-date information from being used by mistake; and the protection of documented information and data. Documented information from outside sources that is needed to plan and run the system shall be identified and controlled.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.