Business information can be traced back to the business event that gave rise to it and linked to those accountable, which assures that it is reliable and was processed in line with defined objectives: source information, the evidence behind it and the transaction record are captured; retention requirements are set from business needs so that operational, compliance and financial reporting demands are met; and source information, evidence and transaction records are disposed of as the retention policy provides.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.