Some IT and OT systems run continuous internet connections for monitoring, data collection, maintenance, safety and security, often as third-party systems with two-way or upload-only data flow, for example bridge and engine room workstations on the admin network, tracked reefer or special cargo, stability and hull stress systems, ENC, VDR and DP, load planning and stowage, engine monitoring and control, CCTV and specialised systems such as drilling, blowout preventers, subsea installation, gas carrier ESD or cable laying. The owner or operator should know the extent and nature of this connectivity and treat it as a key part of the risk assessment.
This control maps to 2 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.