The laboratory shall: exist as a legal entity in its own right or as a clearly bounded part of one, and answer legally for what it does (5.1); name the management that holds overall responsibility (5.2); define and document which laboratory activities it claims conformity for, leaving out activities that external providers perform on an ongoing basis (5.3); perform its activities in a way that satisfies this document, its customers, regulators and recognition bodies, wherever the work is done: its permanent premises, sites away from them, temporary or mobile facilities, or premises belonging to a customer (5.4); set out its organization and management structure, where it sits within any parent organization and how management, technical operations and support services relate, state the responsibility and authority of everyone who manages, carries out or checks work that affects results and how they relate to each other, and document its procedures as far as needed to apply its activities consistently and obtain valid results (5.5); have people given the authority and resources to run, sustain and improve the management system, spot departures from it or from procedures, start action to prevent or reduce them, report to management on its performance and on any need to improve, and make sure laboratory activities are effective (5.6); and its management shall see that messages go out on how effective the management system is and why it matters to meet the requirements of customers and others, and that the system stays intact when changes are planned and made (5.7).
This control maps to 3 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 3 it maps to, and the evidence behind each claim, over MCP and REST.