The enterprise designs its I&T management system to suit its needs, which are established through the goals cascade and the design factors, integrating the governance components and keeping them consistent with the enterprise's governance direction. Management understands the enterprise's vision, direction, strategy, context and challenges. It takes the internal environment into account: the culture and philosophy of management, tolerance of risk, the security and privacy policy, ethical values, the code of conduct, accountability, and what is required for integrity in management. It uses the goals cascade and design factors to set priorities among the management objectives, and it checks those priorities against good practice and requirements specific to its industry and with the relevant governance structures.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.