The enterprise keeps looking for and identifying vendors, sorting them by type, significance and criticality; it sets criteria for judging vendors and contracts, and reviews its whole set of current and possible vendors and contracts. It scans the enterprise landscape for partners and vendors whose complementary capabilities help deliver the I&T strategy and its road map. Criteria covering how vendors and contracts are typed, how significant and how critical they are direct attention to preferred and important vendors. Current vendors and contracts are identified, entered in a register and categorised. Evaluation criteria make it possible to compare vendor performance consistently. Periodically the enterprise compares how incumbent vendors perform with what alternatives offer, to spot opportunities or a pressing reason to revisit contracts.
This control maps to 2 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.