The organization shall develop, establish, implement and maintain processes to assess, evaluate, investigate and close reports of suspected or actual noncompliance, ensuring decisions are fair and impartial; investigations shall be carried out independently by competent persons free of conflicts of interest; the results shall be used as appropriate to improve the CMS (clause 10); the number and outcomes of investigations shall be reported periodically to the governing body or top management; and documented information on investigations shall be retained.
This control maps to 6 controls across 6 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 6 it maps to, and the evidence behind each claim, over MCP and REST.