Communication and consultation help stakeholders understand risk, the basis for decisions and the reasons for actions, and should happen throughout the process (ISO 31000:2018, 6.2); for AI the organization should involve and inform the stakeholders an AI system affects, including those newly introduced by its use, and should communicate its policies and commitments on AI risk so that the views gathered inform fairness criteria, oversight and transparency.
This control maps to 34 controls across 29 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 34 it maps to, and the evidence behind each claim, over MCP and REST.