The organization identifies the knowledge its processes need to run and to make products and services conform, keeps that knowledge, and makes it available as far as needed. When needs and trends change, it looks at what it knows already and decides how it will obtain, or gain access to, the further knowledge and updates it needs. Organizational knowledge may come from inside (intellectual property, lessons learned, experience, results of improvements) or from outside (standards, academia, conferences, customers and providers).
This control maps to 7 controls across 5 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 7 it maps to, and the evidence behind each claim, over MCP and REST.