An organization should: identify how its decisions and activities affect the surrounding environment and where its pollution and waste come from; measure, record and report its significant pollution sources and reductions in pollution, and its water use, waste generation and energy use; take steps to prevent pollution and waste, following the waste management hierarchy, and handle pollution and waste that cannot be avoided properly; talk with local communities about actual and possible emissions and waste, the related health risks and the mitigation in place; progressively lower the pollution it causes directly or indirectly within its control or influence, for example by offering greener products; make public the quantities and types of relevant, significant toxic and hazardous materials it uses and releases, with their known risks both in normal operation and in accidental releases; systematically identify and avoid chemicals banned by national law, chemicals unwanted under international conventions and, where it can, chemicals that scientific bodies or stakeholders regard as of concern (ozone-depleting substances, persistent organic pollutants, chemicals covered by the Rotterdam Convention, chemicals and pesticides the WHO defines as hazardous, carcinogens, mutagens, substances toxic to reproduction, endocrine disruptors, PBTs and vPvBs), and try to prevent their use within its sphere of influence; and run a programme to prevent and prepare for environmental accidents, with an emergency plan for accidents on and off site involving workers, partners, authorities, communities and other stakeholders, including training, drills and information for anyone who could be affected.
This control maps to 3 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 3 it maps to, and the evidence behind each claim, over MCP and REST.