Production and service provision are carried out under conditions the organization keeps controlled. Where they apply, these include: documented information that defines the characteristics of the products, services or activities and the results to be reached; monitoring and measuring resources that are suitable, available and used; monitoring and measurement at the right stages to confirm that criteria are met; suitable infrastructure and a suitable working environment; competent people, holding any qualification required; validating, and revalidating at intervals, any process whose output cannot be checked afterwards by monitoring or measurement, to confirm it can reach planned results; measures that guard against human error; and carrying out release, delivery and post-delivery activities.
This control maps to 13 controls across 8 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 13 it maps to, and the evidence behind each claim, over MCP and REST.