The regulated company plans its computerized system validation at the appropriate levels: corporate or site policies define the overall approach, a validation master plan may summarize the systems, their status, planning and scheduling for a period or program of work, and each GxP regulated system has its own computerized system validation plan that defines how the system will become, and stay, compliant and fit for the use intended. Planning applies to new systems, to work triggered by change, and to periodic review, is approved by management and the quality unit as appropriate, and is the first thing a regulator is likely to ask for.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.