Authority and responsibility for the use of IT are delegated, supported by governance practices and organizational structures. Innovative IT can change how delegation and monitoring work, so the organization makes sure that IT functionality does not exceed the authority and responsibility delegated; in relations with customers, suppliers and regulators, delegation and monitoring rules may need to reach beyond the organization's boundaries, for instance where a supplier checks stock automatically through access to the organization's systems.
This control maps to 14 controls across 3 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 14 it maps to, and the evidence behind each claim, over MCP and REST.