When a nonconformity occurs the provider reacts to it, controlling and correcting it and addressing its consequences as applicable; evaluates whether its causes must be eliminated to stop recurrence here or elsewhere, by reviewing and analysing it, determining its causes and whether similar nonconformities exist or could occur; implements any action needed; reviews the effectiveness of the corrective action; updates the risks and opportunities from planning if necessary; and changes the management system if necessary. Corrective actions match the effects the nonconformities had, and records are retained of their nature, causes and the actions taken and of the effectiveness of the corrective action.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.