The organization shall plan, carry out and control the processes needed to satisfy requirements and to deliver the actions set in 6.1 (together with 6.2 and clauses 9 and 10). It does this by setting criteria for those processes, controlling them against the criteria, and keeping enough documented information to be confident they were performed as planned. The operational processes it documents should cover relationship management, resource management (capacity planning included), service level agreements and statements, and project management. The organization shall control changes it plans, review the effects of changes it did not intend and act to reduce any harm they cause, and shall make sure its processes are controlled.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.