Digital evidence is fragile and can be changed, tampered with or destroyed by poor handling or examination, so those handling it are competent to see what each possible step could do to it and to control that risk. DEFRs and DESs follow documented procedures that keep evidence intact and reliable, including handling guidance for each kind of evidence source and four basic principles: touch the original device or evidence as little as possible; account for and record every change and action, enough for an expert to judge reliability; comply with local rules of evidence; and never act beyond one's competence. Where a change cannot be avoided, the action and its reasons are recorded.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.