The organization decides what to monitor and measure, the methods that give valid results, and when monitoring is done and results analysed and evaluated, keeping documented evidence of results. It evaluates OH&S performance and how effective the system is. What it monitors must include how far legal and other requirements are met, the criteria for judging performance, activities linked to identified hazards, risks and opportunities, progress on objectives and how effective operational and other controls are. Measuring instruments are calibrated or checked where applicable, used correctly and maintained, with records kept.
This control maps to 2 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.