Verification shows that the specifications have been satisfied, using appropriate combinations of reviews, inspections and testing at the levels the specifications require, and it is scaled so that the greatest rigor goes to functions posing the greatest risk to patients, product quality and the integrity of data. A test strategy sets how many tests of which kinds are run, according to risk, novelty and complexity and to how much supplier testing is relied on; supplier testing is leveraged where the supplier assessment supports it; results are recorded against acceptance criteria; failures are captured, reviewed and managed; and the strategy may combine scripted, unscripted and automated testing across development, test and operational environments.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.