A comprehensive legal register covers every legal, regulatory and contractual obligation relevant to the operation (at least environmental, operational, workplace health and safety, labour, social and cultural law) and holds valid copies of current permits, licences, leases and contracts and relevant correspondence with regulators. It is reviewed at set intervals and at once when laws or operations change, is open to the staff who need it, and drives compliance monitoring, decisions and corrective actions.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.