The organization sets up, runs and keeps processes for monitoring, measuring, analysing and evaluating performance. It decides what is to be monitored and measured (including how far legal and other requirements are met, activities and operations linked to identified hazards, risks and opportunities, progress on objectives, and how effective operational and other controls are); which methods will give valid results; the criteria against which performance is judged; when monitoring and measuring take place; and when the results are analysed, evaluated and communicated. It evaluates its OH&S performance and how effective the system is, makes sure that equipment used to monitor and measure is calibrated or verified, used correctly and properly looked after, and keeps documented information as evidence.
This control maps to 20 controls across 13 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 20 it maps to, and the evidence behind each claim, over MCP and REST.