Have the results of a control attestation apply to two authority documents.
We are looking for a way that when a control is tested the results of that test would apply to two different authority documents/policies. For example, both PCI and HITRUST require that default passwords on network equipment be changed. We would ...