The enterprise analyses business requirements and how far I&T-enabled services and their service levels currently support business processes; it discusses and agrees possible services and levels with the business and compares them with the current portfolio to find new or changed services and service level options. Gaps between current services and the business activities they serve are identified, along with areas to improve. Future demand is estimated and present capacity confirmed. Process activities are analysed to find where new or redesigned services are needed. Requirements are set against existing service components and, where feasible, packaged from them. The service portfolio is reviewed regularly, together with those who manage the portfolio and the business relationship, so that obsolete services are retired, and demand is matched to service packages and standardised for efficiency.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.