Top management must have procedures to review the management system at planned intervals so that its continuing suitability, adequacy and effectiveness can be ensured, including the policies and objectives related to the standard. Reviews must take place at least once a year, or a complete review broken into segments must be finished within twelve months, and records must be kept. The inputs must include the results of internal and external audits; feedback from clients and interested parties about fulfilment of the standard; feedback from the impartiality mechanism; where preventive and corrective actions stand; follow-up from previous reviews; the fulfilment of objectives; changes that could affect the system; and appeals and complaints. The outputs must include decisions and actions on improving the effectiveness of the system and its processes, improving the body's fulfilment of the standard, and resource needs.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.