The organization should work out which information sources and tools are most effective for judging whether intended results are achieved, and this should involve consultation with workers or their representatives. Candidates include OH&S processes (training, risk assessment, contractor safety, management of change) and information from incidents (near misses, airborne contaminant overexposure, injuries, spills, illness). The sources listed in sub-clauses 5.3.2 through 5.3.12 are the common ones, not a complete list, and business processes outside OH&S can also serve; additional sources or tools should be identified where the nature of the work, the hazards and exposures or the level of risk calls for them. Throughout the process the organization should respect the confidentiality, privacy and sensitive information of workers.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.