The planned assurance initiative checks whether the internal controls operating are suitable and adequate, and checks what the key in-scope management objectives actually produce: it assesses whether each management control delivers its expected outcomes (control effectiveness); the assurance professional tests outcomes and effectiveness using direct and indirect evidence of the effect on the control's goals, which gives indirect evidence that the objective is met; a choice of testing techniques is used to gather direct or indirect evidence over chosen items and periods, showing the control worked as designed; and the initiative looks into whether the control could run more efficiently, or be designed more effectively, by streamlining steps or combining it with other controls.
This control maps to 2 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.