An organization that takes on this work shall find and deal with the legal, regulatory and contractual obligations that shape their scope and how they may be carried out. It shall at least consider: occupational safety and health requirements and guidance from government bodies at national and at state, provincial, cantonal, county and city level; general principles and local laws that set required prevention, assessment and intervention, such as duty of care, reporting duties, premises security and liability, employer liability for employees' acts (respondeat superior), negligence theories, and discrimination and harassment law; and duties under any applicable collective bargaining agreement, for instance on reporting safety concerns or conducting investigations. Every one of these shall be taken into account and revisited at intervals as laws, regulations and contracts change.
This control maps to 3 controls across 3 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 3 it maps to, and the evidence behind each claim, over MCP and REST.