Legal counsel helps the organization understand and meet its WVPI obligations and should have suitable training and experience across relevant areas such as employment law, civil litigation and premises liability. Counsel, in-house or external, should make sure legal requirements for prevention are met and guide the organization through the legal questions that arise at every stage of incident management, and should raise with the team any litigation, complaints or other actions that could spark a situation of concern. Before an incident, counsel helps management write lawful policies, procedures and practices for assessment, prevention and intervention, possibly including contract terms obliging suppliers and vendors to disclose what they know of a person's conduct. Once an incident is under way, counsel should collaborate tightly with HR, security and management on: legal issues in assessment and management (privacy rights, adherence to the organization's own policies, legal duties, relevant statutes, evidence preservation, due process, disciplinary protocols); thorough investigation and fact-finding methods; suitable discipline or remediation; the legal risks of options under consideration, weighed against security, confidentiality and mitigation needs; and, where fitting, taking the lead in seeking court orders restraining a person on the company's behalf, or other legal steps.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.