Where monitoring or measurement is used to check that products and services conform, the organization identifies and provides the resources needed for results to be valid and reliable. It makes sure those resources suit the kind of monitoring and measurement done and are maintained so they stay fit for purpose, and it retains documented information as evidence that they are. Where traceability of measurement is required, or the organization judges it essential to confidence in the results, measuring equipment is: calibrated or verified, or both, at set intervals or before use, against standards traceable to international or national ones (and where none exist, the basis used is recorded); identified so its status is known; and protected from adjustment, damage or deterioration that would make its calibration status or later results invalid. If equipment proves unfit for its purpose, the organization judges whether earlier results remain valid and acts as needed.
This control maps to 13 controls across 7 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 13 it maps to, and the evidence behind each claim, over MCP and REST.