Guidance: in determining programme resources, those managing it should consider the money and time needed to develop audit activities, carry them out, manage them and improve them; the audit methods; whether auditors and technical experts with the competence the objectives call for can be obtained; the programme's extent and its risks and opportunities; the time and cost of travel, accommodation and any other needs; time zones; the availability of ICT for remote audits; tools, technology and equipment; the availability of necessary documented information; and facility requirements such as security clearances, background checks, protective equipment and clean room attire.
This control maps to 12 controls across 10 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 12 it maps to, and the evidence behind each claim, over MCP and REST.