A detailed work programme is built for the assurance initiative, organised by the in-scope management objectives and governance components: its detailed steps gather and assess information from the in-scope management controls, concentrating on how good practice for designing and operating controls is defined and applied; the initiative understands where the management objectives and their supporting controls sit and how they contribute to alignment and enterprise goals; every stakeholder and their interests are understood; the good practices expected of the management controls are agreed; where a control is weak, practices for finding the residual risk are set so it can be reported; and the controls' point in their life cycle is understood and the values expected of them agreed.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.