A critical limit is set for every critical control point and should be validated against scientific evidence and legislative and regulatory requirements, and a means of monitoring each limit is established so the business knows when it is exceeded. Limits are objective wherever possible and otherwise expressed as unambiguously as can be; they may draw on literature, regulation, competent authority guidance or third-party studies. Work instructions should define the tasks of the people in charge of each CCP; monitoring targets the limit itself, is preferably done by the operators who run the step, is signed with results and timings, and is continuous or frequent enough to detect deviations promptly and limit the affected product.
This control maps to 2 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.