Guidance: every person doing work the organization controls whose work has, or could have, an effect on its environmental performance (including on whether it meets its compliance obligations) should be competent on the basis of training, education, experience or a combination, including employees and external providers. Competence needs extend beyond those with significant-impact work to those who manage functions or roles critical to the intended outcomes: technicians (sampling, monitoring equipment), programme managers (regulations), operators (impacts of their work, operating criteria), environmental managers (system implementation, risk determination, performance analysis), audit programme managers and top management (policy implications, resource application). Where competencies are unavailable, competent service providers can be procured. The organization should identify the competencies needed, address gaps, retain documented information as evidence of competence, run a training process where training is the route (needs, plan, delivery, evaluation, records), and evaluate the effectiveness of training and other actions.
This control maps to 2 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.