The enterprise identifies and maintains the standards, procedures and practices for its key processes that help it fulfil the intent of the quality management standards it has agreed, consistent with the I&T control framework. Quality management standards, practices and procedures are defined in keeping with the control framework and with enterprise quality criteria and policies. The practices required are built into key processes and solutions throughout the organisation. The costs and benefits of obtaining quality certifications are weighed. The approach is communicated effectively, for example through regular formal training in quality. Quality data are recorded and monitored, and industry good practice informs how practices are improved and tailored. The enterprise regularly reviews whether specific quality processes are still relevant, efficient and effective, and whether quality objectives are being met.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.