The appointing party shall name people from its own organization to carry out the information management function, in line with its long-term strategy for managing asset information, or shall engage a third party or a prospective lead appointed party under a scope of services to carry out some or all of that function. It considers what those people or parties will be responsible for, what authority is delegated to them and what competence they need (the assignment matrix in Annex A assists).
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.