Guidance: the auditee's relevant management system documented information should be reviewed to gather information for understanding its operations and preparing audit activities and work documents, and to get a picture of how extensive the documentation is so as to judge possible conformity and detect deficiencies, omissions or conflicts. It should include system documents and records and previous audit reports, and take account of the auditee's size, nature, complexity and risks and opportunities and of the audit scope, criteria and objectives.
This control maps to 12 controls across 11 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 12 it maps to, and the evidence behind each claim, over MCP and REST.