After operation, results can call for reassessment. Operating results should be evaluated against the objectives and against the risks that were identified; objectives are refined where the originals cannot be achieved or need modification in the light of operating experience; requirements are refined, added or removed where experience shows some were not valid; and organisations should watch for the events and conditions that lead to risk, as the risk treatment plan describes.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.