Every internal and external party concerned is trained regularly on the procedures to follow and on their own roles and responsibilities if a disruption happens: awareness and training on the BCP and DRP are rolled out; training requirements and plans are set and kept current for people who carry out continuity planning, risk assessment, impact assessment, incident response and media communication, and the training covers how often exercises happen and what type they are; competencies are built through hands-on training that includes taking part in tests and exercises; and skills and competencies are monitored using the results of tests and exercises.
This control maps to 2 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.