The provider never outsources the design and planning of schemes, the evaluation of performance or the authorisation of reports, although advisors, experts and steering groups may assist. It has procedures ensuring that external providers have sufficient experience and technical competence for their tasks and comply with the relevant clauses of the standard and other appropriate documents, and it tells participants and customers beforehand, in writing, which products and services are or may be provided externally when they affect validity. A procedure with records covers defining, reviewing and approving requirements for external products and services; criteria for selecting providers and for evaluating and monitoring performance; ensuring conformity to requirements before use or direct supply to a participant; and acting on monitoring results. The provider communicates to external providers the products and services required, acceptance criteria, competence and qualification requirements, and any PT activities to be performed at their premises, and remains responsible to participants and customers for what is provided externally.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.