The organization documents what infrastructure it needs to make product conform, to avoid product being mixed up and to keep product handled in an orderly way. Where appropriate, the infrastructure covers buildings, workspace and associated utilities; process equipment, both hardware and software; and supporting services such as transport, communication and information systems. Where maintenance, or a lack of it, could affect product quality, the organization documents maintenance requirements, including how often maintenance is done. Where appropriate, these requirements apply to equipment used in production, to controlling the work environment and to monitoring and measuring. Records of the maintenance are kept.
This control maps to 4 controls across 4 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 4 it maps to, and the evidence behind each claim, over MCP and REST.