The organization shows evidence that the methods and equipment it uses for monitoring and measuring are fit for the monitoring and measuring it performs for the hazard control plan and the PRPs. Equipment is calibrated or verified at set intervals before use; adjusted as needed; labelled so its calibration status can be seen; protected against adjustments that would make results invalid; and protected from damage and deterioration. Calibration and verification results are kept, and calibration is traceable to national or international measurement standards or, where none exist, the basis used is documented. If equipment or the process environment turns out not to conform, the organization assesses whether earlier results are still valid, acts appropriately on the equipment, the environment and any product affected, and documents the assessment and the action. Software used for monitoring and measuring is validated before use by the organization, the software supplier or a third party, the validation is documented, and the software is kept up to date promptly; changes, configuration of commercial off-the-shelf software included, are authorised, documented and validated before they go live.
This control maps to 4 controls across 3 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 4 it maps to, and the evidence behind each claim, over MCP and REST.