Documented information that the innovation management system needs should be controlled so that it can be found and used where and when it is required and is properly protected against loss of integrity, misuse or loss of confidentiality. The organization should deal with how it is distributed, accessed, retrieved and used and at what confidentiality level; how it is stored and preserved, legibility included; how changes are controlled, for example through versioning; and how long it is kept and how it is disposed of. Documented information from outside sources that is needed to plan and run the system should be identified and controlled. Access may mean the right only to view, or the right and authority both to view and to change.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.