Following through on its compliance commitment, the organization keeps procedures to evaluate periodically its compliance with applicable legal requirements, and also evaluates compliance with other requirements it subscribes to, including industry good practice, either together with the legal evaluation or separately. Records of the periodic evaluations are kept. Annex B adds that applicable permits and licences are included.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.