The organization gathers and monitors information on whether it has satisfied customer requirements, as one of the measures of how effective the quality management system is, and documents the methods used to obtain and use that information. It documents procedures for a feedback process that collects data from production and from post-production activities. The information gathered through feedback serves as a possible input to risk management, for monitoring and keeping product requirements current, and to the product realization and improvement processes. If regulatory requirements call for the organization to gain particular experience from post-production activities, reviewing that experience is part of the feedback process.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.