Management review shall include the status of actions from previous reviews; changes in internal and external issues, and in what interested parties relevant to the CMS need and expect; information on compliance performance including trends in nonconformities, noncompliances and corrective actions, monitoring and measurement results and audit results; and opportunities for continual improvement. It shall also address the adequacy of the compliance policy, the independence of the compliance function, achievement of the compliance objectives, adequacy of resources, adequacy of the compliance risk assessment, effectiveness of existing controls and performance indicators, communication with persons raising concerns and interested parties including feedback (9.1.2) and complaints, investigations (8.4), and the effectiveness of reporting mechanisms.
This control maps to 35 controls across 25 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 35 it maps to, and the evidence behind each claim, over MCP and REST.