The organization should put in place a CDE solution and workflow so that people who need information can reach it, allowing a federated information model to be built from models produced by different parties; security and quality should be considered when it is defined. Issues such as hard, soft and time clashes in space and functional incompatibilities should be prevented while information is produced, not found after delivery. Generic information should be used until products are chosen and then swapped for specific information, and agreements govern all rights in the information.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.