For a change that deviates from the baseline, determine beforehand the CIP-005 and CIP-007 controls that could be affected, verify afterwards that they are not adversely affected, and document the results.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.