Drinking water comes from an approved public water system or a non-public system built, maintained and operated according to law (P); systems are flushed and disinfected before use after construction, repair, modification or an emergency such as a flood (P); bottled water comes from approved sources under 21 CFR 129 (P). Public system water meets 40 CFR 141 and state standards, and non-public water meets state standards (P). Non-drinking water is used only if approved and only for nonculinary purposes such as air conditioning, equipment cooling and fire protection (P). Non-public system water is sampled and tested at least annually and as state rules require (Pf), with the latest report kept on file.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.