A reportable incident that is not a priority type (for example a use of a regulated restrictive practice that is reportable) must be notified to the Commissioner in writing within 5 business days after the provider becomes aware of it, with its name and contact details; a description including impact or harm; the time, date and place if known; persons involved and witnesses; immediate actions taken and whether police or another body was told; further proposed actions; the notifier's details; and any other information the Commissioner requires, on the approved form.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.