The organisation shall establish and control processes sufficient to achieve the outcomes in this clause.
This clause specifies required outcomes and records. It does not prescribe the search sequence, enquiry method, software workflow or engagement technique.