Guidance: the organization should set up communication processes for its environmental management system, with its compliance obligations in mind, that identify what is communicated, when, to whom and how, weighing costs and benefits of approaches. Environmental information the organization communicates should come from, and agree with, the information its system produces, including internal performance evaluation. Methods can promote dialogue with interested parties (open days, focus groups, community dialogue, websites, reports, hotlines). Relevant questions and concerns should be considered and answered, preferably through a process for taking in communications and replying to them, and documented information should be kept to evidence communications where this adds value, to recall history, understand engagements over time and improve future communication. Process steps: gather information including from interested parties, determine target audiences and their needs, select and decide the information, choose methods and formats, and periodically evaluate effectiveness. Core components include top management communicating importance, the policy and roles internally, significant aspects, objectives, requirements to external providers, performance information internally and externally, audit results to management, and interested party communications into management review.
This control maps to 5 controls across 3 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 5 it maps to, and the evidence behind each claim, over MCP and REST.