The body must review the application information to ensure that it is sufficient for the certification process; that the body and the client resolve any difference in how they read the requirement, including agreement on the standards or other normative documents; that the scope sought is defined; that the means are available for every evaluation activity; and that the body can show the skill and capacity to do the work. The body must have a process to identify when a request involves a product type, a normative document or a scheme with which it has no prior experience. In those cases it must show that it can perform every certification task with the needed skill and keep a record of why it went ahead. It must decline a specific certification if it lacks the competence or capability. If it relies on certifications already granted to the client or to other clients to omit activities, it must reference the existing certificates in its records and, on request, justify the omission.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.