Production and service provision take place under controlled conditions. These include: documented information setting out product characteristics and the results to be achieved (such as digital definition data, drawings, control plans, travelers and routers); suitable monitoring and measuring resources; monitoring and measurement at suitable stages, with (under 9100) acceptance documents stating the acceptance and rejection criteria, the point in the sequence at which verification takes place, the results to be kept and the equipment and instructions needed, and with any sampling plan justified by recognised statistical principles and suited to how critical the product is and how capable the process is; suitable infrastructure and working environment, including tools and software specific to the product; people who are competent and qualified; validation, and periodic revalidation, of special processes; steps to prevent human error; and release, delivery and post-delivery activities. 9100 adds: criteria for workmanship; accounting for every product while it is in production; control and monitoring of critical items, key characteristics included; ways of measuring variable data; inspection points during the process where verification later on would not be adequate; evidence that every production and inspection step was done as planned or else was authorized; keeping foreign objects out and finding and removing any present; control of utilities and supplies that affect conformity; and identifying and recording product released for later use before verification is finished, so that it can be recalled and replaced.
This control maps to 2 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.