Once a failure against the certification requirements is established, whether from surveillance or another source, the body must consider and decide on the appropriate action. The options include continuing certification under conditions such as increased surveillance, reducing the scope to remove nonconforming variants, suspending certification while the client takes remedial action, or withdrawing certification. Where the action involves evaluation, review or a decision, those requirements apply. If certification is terminated at the client's request, suspended or withdrawn, the body must take the actions the scheme specifies and make every necessary change to certificates, public information and mark authorisations so that nothing suggests the product is still certified. If the scope is reduced, the reduced scope must be clearly communicated and stated in the documents and public information. For a suspension, the body must assign competent people to tell the client what is needed to end it, and any evaluation, review or decision needed to resolve it must follow the process. If certification is reinstated, the body must restore the correct indications, and any reduced scope must be stated clearly.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.