Guidance: communication and consultation help stakeholders understand risk, what decisions rest on and why particular actions are needed. Communication builds awareness and understanding; consultation obtains feedback and information to support decisions; coordinating the two should produce information exchanged that is factual, timely, relevant, accurate and understandable while respecting confidentiality, integrity and individuals' privacy rights. Communicating with and consulting the appropriate external and internal stakeholders should happen within and throughout every step of the process, and aim to combine the relevant kinds of expertise at each step, ensure different views are considered when risk criteria are defined and risks evaluated, give enough information to support oversight of risk and the decisions taken, and build a sense of inclusion and ownership in those whom the risk affects.
This control maps to 38 controls across 31 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 38 it maps to, and the evidence behind each claim, over MCP and REST.