The document addresses what governing an organization's IT, data and digital capabilities involves, shortened throughout to the governance of IT. The governing body stays ultimately accountable for the whole organization, but governance of IT is practised at every level. IT is taken widely, including emerging technology: computers, sensors, software, cloud services and the techniques used to collect, hold, process, spread and transform data; digital capabilities, frequently innovative, are the services, products and processes that IT and data make possible or support and through which value reaches stakeholders. Because the governance of IT sits inside the governance of organizations, the document follows ISO 37000, whose eleven principles guide governing bodies towards three intended outcomes (effective performance, responsible stewardship, ethical behaviour) and whose account of governance is the basis for fulfilling the organization's purpose effectively, responsibly and ethically as stakeholders expect. IT and the data it draws value from now matter strategically to most organizations, so stakeholders expect a great deal from how IT is governed.
This control maps to 12 controls across 4 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 12 it maps to, and the evidence behind each claim, over MCP and REST.