The policies, procedures and the way they are administered must not discriminate. Procedures cannot be used to block applicants except where the standard itself allows. The body must make its services available to every applicant whose activity falls inside the scope it operates. Access cannot be made conditional on the size of the client, membership of an association or group, or the number of certificates already issued, and there must be no undue financial or other conditions. The body may refuse an application or end a contract for a fundamental reason, such as illegal activity, a history of repeated non-compliance or a similar client-specific problem. The requirements, evaluation, review, decision and surveillance must stay within the matters related to the certification scope.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.