The organization monitors and measures its psychosocial risk activities and system performance systematically, to see whether policy is followed and objectives met, to gather data on psychological health and safety while protecting personal information, to check that identification and assessment processes exist and controls work, to support improvement decisions, to confirm legal and other requirements are met, and to report system performance. Qualitative and quantitative measures are developed with workers and their representatives. Controls are kept, reviewed and revised: when a new hazard appears, when a control falls short, before a major change to the work environment or systems, or when consultation or workers ask for it. Results are recorded, and leading indicators that predict performance are used alongside lagging ones.
This control maps to 2 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.