The system is assessed to establish whether GxP regulation applies to it, and is entered to the inventory of computerized systems in accordance with documented procedures, so that it is known, owned and scheduled into the compliance framework from the start of the project. The GxP determination is recorded with the specific regulations and the parts of the system to which they apply, since a system that is only partly in scope of GxP can be validated far more simply once that is understood.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.