Run a repeatable process that keeps the BCMS boundary honest. The process takes changes in the organization, its market, its products and its obligations as input and produces a reviewed context analysis, a current register of interested parties and their requirements, an approved scope with the exclusions justified, and one system description showing the BCMS processes and how they interact. The process is triggered at planned intervals and whenever a significant change occurs, and its output is the boundary every other process works inside. Its outcome is a BCMS whose scope still matches the organization rather than the audit.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.