The organization makes sure that what external providers supply (processes, products and services) does not undermine its capacity to deliver conforming products and services to customers reliably. To that end it keeps outsourced processes under the control of its QMS; defines both the controls it will apply to the provider and those it will apply to what the provider delivers; takes into account how the external supply could affect its ability to meet customer, legal and regulatory requirements reliably, and how effective the provider's own controls are; and decides what verification or other activity is needed to confirm that what is supplied meets requirements.
This control maps to 7 controls across 6 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 7 it maps to, and the evidence behind each claim, over MCP and REST.