The body must have procedures to identify and manage nonconformities in its operations. Where necessary it must act to remove the causes so that the problem does not recur. The action must be in proportion to the harm the problem can do. The procedure must define how the body identifies nonconformities, for example from complaints and internal audits; determines their causes; corrects them; evaluates whether action is needed to prevent recurrence; decides and implements the action in good time; records the results; and reviews the effectiveness of the action.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.