DEFRs and DESs hold the technical and legal competencies needed (Annex A gives examples) and can show they are properly trained and understand enough, technically and legally, to handle evidence correctly, including the processes and methods suited to each kind of source; good tools do not make up for an incompetent handler. Where a jurisdiction prescribes how qualifications are established, DEFRs inform themselves of it. When asked, they can demonstrate competence with the tools and methods chosen and provide evidence that it is current. DEFRs are trained to handle devices in an investigative setting, show and keep up their skills to the appropriate authorities, and both the individual and the employer are responsible for training and for keeping competence up to date.
This control maps to 4 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 4 it maps to, and the evidence behind each claim, over MCP and REST.