The Statement is on show in at least one prominent, always-open place on the premises where staff, guests and suppliers can read it, is published digitally inside (intranet or shared drives) and outside (website or equal), reads the same in every format with the latest approved version always available, and is handed over promptly to any key stakeholder who asks. Display, publication, version control and access are evidenced and checked every 12 months.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.