Guidance: the organization should think through and plan the action it will take on its compliance obligations, its significant environmental aspects, and the risks and opportunities identified under 6.1.1, whether through the processes of its environmental management system or through other business processes, and should establish whether that action worked. Action may be a single measure (an objective, an operational control, emergency preparedness, supplier evaluation) or a combination involving control hierarchies. Planning should weigh the technology options and what is feasible, the organization's operational, financial and business requirements, and the chance of unintended consequences, including adverse impacts over the short or long term at any point in the life cycle of a product or service. Effectiveness can be evaluated by statistical techniques or by comparing monitoring results with expected performance, sometimes through other management systems, in which case the environmental management system should reference that evaluation.
This control maps to 7 controls across 4 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 7 it maps to, and the evidence behind each claim, over MCP and REST.