The committee defines standard methods for measuring, analysing and evaluating ONF elements so results are valid and repeatable, monitors changes in the organisation's contexts, reviews elements with those methods to see whether they perform as expected, retains documented information as evidence of the reviews, identifies and records needed improvements and communicates them to application project teams. Reviews run at planned intervals or on specific changes, using risk assessment outcomes, context changes, audit results, feedback, action status, effectiveness measurements and incident records; project artefacts are monitored to confirm projects use the ONF components, declare the level of trust they aim for and the level verification showed, and carry out periodic application risk assessments. Auditors verify the existence and quality of the review evidence and of the recorded improvement needs.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.