The organization plans actions on its risks and opportunities and on its legal and other requirements, and also plans how it will get ready for and respond to emergencies. It plans how those actions will be built into and carried out through the processes of its OH&S management system or other business processes, and how their effectiveness will be judged. In planning, it takes account of the hierarchy of controls and of what the system produces, and it considers good practice, the technology options available, and its financial, operational and business requirements.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.