The organization works out and writes down the factors of its context. Outside it: cultural, social and political conditions, law and regulation, finance and the economy, technology, the natural environment and competition, whether international, national, regional or local; its tier in the supply chain, its obligations and relationships, and the key drivers and trends that bear on its objectives; and how external stakeholders see things and what they value. Inside it: assets, activities, functions, services, products, partnerships, the supply chain and stakeholder relationships; capabilities in terms of resources and knowledge (capital, time, people, processes, systems, technology); the systems and flows that carry information and the way decisions are made, formally or informally; internal stakeholders; policies, objectives and the strategies to reach them; perceptions, values and culture; standards and reference models adopted; and structures such as governance, roles and accountabilities.
This control maps to 2 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.