Staff of the prospective lead appointed party's own organization shall be named to carry out the information management function, or a third party or another prospective appointed party shall be engaged under a scope of services. The choice considers the appointing party's EIR, the tasks involved, the authority delegated, the competence required and probity arrangements for handling conflicts of interest; where the lead appointed party also acts for the appointing party, different people should act in each role.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.