Once the system is running, procedures confirm it works effectively: that the plan is followed, hazards are controlled on an ongoing basis and control measures work as intended, including periodic review of the system's adequacy and review when changes occur. Verification uses observation, internal and external audit, calibration, sampling and testing and record review, for example: reviewing monitoring and corrective action records, calibrating or checking instruments, observing control measures, sampling and testing product for microorganisms, chemical or physical hazards, environmental sampling (for Listeria, for example) and reviewing the hazard analysis and plan. Verification is done by someone other than the person responsible for monitoring and corrective actions (or by external experts), often enough to confirm the system is working, and includes a periodic comprehensive review (reanalysis or audit) confirming the right significant hazards, adequate measures and limits, effective monitoring and verification, and appropriate corrective actions.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.