The IT capabilities are placed within the enterprise's organisational structure so that their position mirrors how strategically important IT is and how much operations depend on it, which includes the line the CIO reports to and how IT is represented in the bodies that take decisions. The enterprise understands the context for this placement (its strategy and operating model, whether centralised, federated, decentralised or hybrid, how important I&T is, and the sourcing model); it identifies, evaluates and ranks options for placement, sourcing and operating models; and it defines and agrees the placement.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.