The methods and responsibility for all agreements with contract manufacturers on food safety, customer requirements, realisation and delivery are documented and implemented (2.3.3.1). The site determines and documents the food safety risk of contract-manufactured product and ensures that high-risk co-manufactured products and processes are audited by the site or a third party for compliance with this Code and regulatory and customer requirements, that low-risk ones meet this Code or another GFSI-benchmarked programme plus regulatory and customer requirements, and that contract changes have both parties' sign-off and are passed on to relevant staff (2.3.3.2). Contracts with outside warehousing and distribution firms include customer product requirements and 2.3.3.2 compliance, carry both parties' approval and are shared with the people concerned, and the site checks Code, customer and regulatory compliance at all times (2.3.3.3). The site keeps records of contracts, audits and approved changes (2.3.3.4).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.