The body must plan the evaluation work so that the necessary arrangements can be managed. It must assign people to each evaluation task carried out with internal resources. It must ensure that the information and documentation needed for each task are available. It must carry out the internal tasks and manage outsourced resources in line with the plan, and evaluate the product against the requirements in the certification scope and any other scheme requirements. It may rely on evaluation results completed before the application only where it takes responsibility for them and satisfies itself that the organisation that did the work meets the outsourcing requirements and the scheme. It must tell the client about every nonconformity. If the client wants to continue, it must explain the additional evaluation needed to verify correction, and repeat the process if the client agrees. All evaluation results must be documented before review.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.