Certification activities must be structured and managed so that impartiality is protected. The organisation structure has to be documented, with the duties, responsibilities and authorities of management, certification personnel and any committees. Where the body sits inside a larger legal person, the chart must also show who it answers to and how it relates to the rest. Management must identify the board, group or person with overall authority for a list of functions: policy, supervision of implementation, finances, development of certification activities and requirements, evaluation, review, certification decisions, delegation, contracts, resources, complaints and appeals, personnel competence and the management system. Any committee involved in certification must have formal rules for appointment, terms of reference and operation, must be free from commercial and financial pressure, and must remain appointable and removable by the body.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.