The certification body keeps its AIMS clients informed of changes to its requirements and gives them what ISO/IEC 17021-1:2015, 8.5 requires on the certification activity, the process and the use of certification, and binds each client to tell it without delay about matters that can affect the AIMS's ability to meet certification requirements. Certification bodies applying the standard write into the certification agreement that the client reports serious incidents or crises and legal violations that involve a competent authority, incidents with lasting impact or needing external responders, and changes in legal, ownership or organizational status, key personnel, headcount, sites, scope, the management system and its processes, and revisions of the statement of applicability referenced on the certificate.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.