The body is responsible for, and must retain authority over, its certification decisions. The body must name at least one person to decide on the basis of the evaluation file, the review and anything else that bears on the case. The decision must be made by a person or group, such as a committee, that was not involved in the evaluation. The review and the decision may be completed at the same time by the same person or group. A decision maker who is not a committee member must be on the payroll of, or contracted to, the body or an entity under its organisational control. Organisational control means whole or majority ownership, majority participation on the board, or a documented authority over another entity in a network linked by ownership or board control. People in controlled entities must meet the same requirements as the body's own people. If certification is refused, the body must notify the client and identify the reasons.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.