The site documents and runs a procedure, with named responsibility, for choosing, assessing, approving and then monitoring suppliers, and keeps an up-to-date register of approved suppliers together with records of goods-in inspections and of audits of suppliers (2.3.4.1). The programme rests on supplier past performance and the risk of the materials and services supplied and contains at least agreed specifications, the risk level applied to each supplier's materials and services, a summary of the supplier's food safety controls, methods for granting approval, methods and frequency of monitoring, details of required certificates of conformance, and methods and frequency for reviewing performance and status (2.3.4.2). Raw material verification uses certificates of conformance or analysis, or sampling and testing, at a frequency the site sets (2.3.4.3). Inputs from non-approved suppliers are accepted only in an emergency and only after a recorded receiving inspection or analysis before use (2.3.4.4). Materials from sister sites meet the same specification, approval and receiving requirements as any other supplier (2.3.4.5). Supplier audits are risk-based and carried out by people trained in auditing who know the relevant food safety and legal requirements (2.3.4.6).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.