Documented information that the standard and the environmental management system call for is controlled so that it can be found and used, in a fit state, wherever and whenever it is needed, and is properly protected against improper use, loss of integrity or loss of confidentiality. Where relevant, the organization deals with distribution, access, retrieval and use; storage and preservation, legibility included; control of changes, version control included; and retention and disposition. Documented information originating outside the organization that it judges necessary for planning and running the system is identified as appropriate and brought under control.
This control maps to 17 controls across 12 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 17 it maps to, and the evidence behind each claim, over MCP and REST.