Plan, set up, run and maintain an audit programme (frequency, methods, responsibilities, planning requirements, reporting) that reflects EOMS objectives, the importance of processes, interested party feedback and earlier results. Define each audit's objectives, criteria and scope; choose auditors and conduct audits so the process is objective and impartial, with no auditor auditing their own work; report results to relevant management; identify improvement opportunities; take timely, effective corrective action; and keep records evidencing the programme and its results (ISO 19011 gives guidance).
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.