Added in the second edition from the harmonized structure: whenever the organization decides the privacy information management system needs to change, it shall make the change in a planned way. For a PIMS the changes that most often need planning are changes to how PII is processed, to the systems processing it, to processors and subcontractors, and to the legal landscape; this planning links to the privacy impact assessment control in Annex A (A.1.2.6).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.