The organization sets up, runs and keeps processes that govern how it buys products and services, so that what it buys is in line with its OH&S management system.
This control maps to 6 controls across 4 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.