The organization runs one or more ongoing, proactive processes to identify hazards. They must cover everyday and out-of-the-ordinary work and situations, including hazards from infrastructure, equipment, substances and physical conditions, from the product and service life cycle, from human factors, from how work is done, from new technologies, from digital platform work and from work at places the organization does not control. They must also cover past incidents and their causes, potential emergencies, people (those with access, neighbours, remote workers), the design of work areas and equipment adapted to workers including gender-specific health needs, situations near the workplace, psychosocial hazards, occupational health hazards, actual or proposed changes, new knowledge about hazards and climate change or its forecast effects such as extreme weather, heat, ultraviolet exposure and vector-borne disease.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.