Guidance: evaluation should use two or more methods, recognising that the options may not all apply, differ in reliability, and should be combined for an objective, consistent, fair and reliable outcome: review of records (education, training, employment, credentials, audit experience), feedback (surveys, complaints, references, testimonials, peer review, appraisal of performance), interview (behaviour, communication, knowledge, checking of information), observation (role play, performance at work, audits that are witnessed), testing (oral and written examinations, psychometric tests) and post-audit review (review of the report, interviews with the leader and team, auditee feedback).
This control maps to 12 controls across 8 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 12 it maps to, and the evidence behind each claim, over MCP and REST.