The organisation knows, maps, inventories and controls how data moves through its business processes over the whole data life cycle, from when data is created or acquired until it is retired: what data consumers and data producers require is mapped and brought into line; mappings between business processes and data are defined, kept current and reviewed periodically for compliance; a defined process governs collaborative agreements about shared data and how processes use it; for the shared data of each major process, data flows and complete life cycle maps linking data to processes are put in place; data governance, engaging stakeholders, manages any change made for a business reason to shared or target data sets; and metrics are used to widen approved reuse of shared data and remove redundant processing.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.