The organization decides what OH&S communications it needs inside and outside, covering what, when, with whom and how. In deciding with whom, it accounts for workers at all levels, external providers and visitors, and other interested parties. In deciding how, it accounts for worker diversity and the communication needs that follow and respects the sensitivity and confidentiality of personal and health information. It considers external parties' needs in setting up its communication processes, takes legal and other requirements into account, makes sure what it communicates is reliable and consistent with system information, responds to relevant communications about the system and keeps evidence of communication as appropriate.
This control maps to 2 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.