Staffing that is sufficient and suitable is obtained and kept. Staffing needs are reassessed at regular intervals and whenever major change occurs, so that the IT function, and the enterprise as a whole, has the people it needs to support goals, business processes, controls and I&T initiatives. Recruiting and retaining staff follow the enterprise's personnel policies. Flexible arrangements, such as transfers, contractors and services bought from third parties, cover shifting needs. IT recruitment includes background checks on employees, contractors and vendors, with how thorough and how frequent they are depending on how sensitive and critical the function is.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.