The organization sets up, runs and maintains the processes it needs to be ready for, and to deal with, the potential emergencies it identified under 6.1.1. It gets ready by planning how to prevent or reduce the adverse environmental impacts an emergency could cause; it responds when an emergency actually happens; it acts to prevent or reduce the consequences in proportion to how serious the emergency is and how large its environmental impact could be; where practicable it tests its planned responses from time to time; it reviews and updates its processes and planned responses periodically, especially after an emergency or a test; and, as appropriate, it gives relevant interested parties, including people working under its control, information and training on preparing for and responding to emergencies. Documented information is kept to the extent needed to be confident the processes run as planned.
This control maps to 18 controls across 15 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 18 it maps to, and the evidence behind each claim, over MCP and REST.