Whenever CCP critical limits or OPRP action criteria are missed, the need for corrective action is evaluated. The organization sets up and keeps documented information that specifies the actions to find and remove the cause of nonconformities detected, stop them recurring and bring the process back under control. These include reviewing nonconformities that come to light through complaints from customers or consumers and through reports of regulatory inspections, reviewing monitoring result trends that suggest control is being lost, finding causes, deciding and carrying out action to stop recurrence, documenting the outcome, and checking the action works. Documented information on every corrective action is kept.
This control maps to 4 controls across 3 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 4 it maps to, and the evidence behind each claim, over MCP and REST.