Guidance: once the programme and its resources are established, those managing it should implement the operational planning and coordination of all its activities: communicate the relevant parts of the programme including its risks and opportunities to interested parties and report progress periodically; set the objectives, scope and criteria of every audit; select audit methods; coordinate and schedule audits and related activities; ensure audit teams have the necessary competence; provide individual and overall resources; ensure audits are conducted according to the programme while managing operational risks, opportunities and unexpected events; ensure documented information on audit activities is managed and maintained; define and implement the operational controls for programme monitoring; and review the programme for improvement opportunities.
This control maps to 16 controls across 11 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 16 it maps to, and the evidence behind each claim, over MCP and REST.