The change management process concentrates at minimum on three things: administering changes, test plan results included; assessing the risk of what a change might bring about, with a written roll-back plan; and the procedure by which changes are approved.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.