Management and process owners are encouraged to strengthen controls proactively through an ongoing self-assessment programme that judges how complete and effective management's control is over processes, policies and contracts: a consistent, agreed self-assessment approach is coordinated with internal and external auditors; evaluation plans, scope and criteria are maintained, and it is planned how results reach the board and general, business and IT management; how often self-assessments run takes account of how effective ongoing monitoring is; responsibility goes to people selected for their objectivity and competence; independent reviews secure objectivity and bring in good practice from other enterprises; results are compared against industry standards and good practice; and outcomes and benchmarking are summarised and reported so remedial action can follow.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.