Every action and method the DEFR used can be defended, for example by showing the decision was the best choice for obtaining all the potential evidence; a second DEFR or DES can also confirm it by re-running or validating what was done. Organizations are best served by employing DEFRs and DESs with the core skills and competency of Annex A, so that correct processes are followed, evidence of value is preserved, and the material can be used, for example, in disciplinary procedures or exchanged between jurisdictions.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.