The organization sets up, carries out and maintains verification activities, planned so that their purpose, methods, frequency and responsibilities are defined, to confirm that: the PRPs are in place and working; the hazard control plan is in place and working; hazard levels stay inside the acceptable levels identified; the inputs to the hazard analysis are kept current; and other actions the organization decided on are in place and working. The person who monitors an activity does not also verify it. Results are kept as documented information and communicated. Where verification testing of end product or process samples shows a hazard above its acceptable level, the lots affected are treated as potentially unsafe and corrective action is taken.
This control maps to 11 controls across 9 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 11 it maps to, and the evidence behind each claim, over MCP and REST.