If a nonconformity arises, the organization shall respond to it by acting to control and correct it and by dealing with its consequences. It shall assess whether action is needed to remove the cause so that the nonconformity does not happen again or elsewhere, by reviewing it, finding its cause and checking whether similar nonconformities exist or might arise. It shall carry out any action needed, review whether the corrective action worked, and change the system where necessary. Corrective actions shall be proportionate to the effects of the nonconformities, and documented information shall be retained on what the nonconformities were, what was done about them, and what the corrective action achieved.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.