The organization has a process for incidents and nonconformities involving psychosocial risk and considers a dedicated investigation route because such cases are sensitive; defines reporting arrangements that protect confidentiality and ensure a prompt response; encourages and supports reporting in ways that reduce fear of reprisal; and uses investigation findings and corrective action recommendations to find improvements.
This control maps to 4 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 4 it maps to, and the evidence behind each claim, over MCP and REST.