unified
UC-ASSET-02 — Inventory data and document processing activities and flows
Maintain inventories of data and corresponding metadata for designated data types, together with records of processing activities capturing purposes, data categories, recipients, retention periods, and safeguards as required by applicable privacy regulation. Maintain representations of authorized network communications and internal and external data flows, such as data-flow diagrams. Review and update these records upon significant change and at least annually so management relies on complete, quality information.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- domain
- Asset Management & Inventory
- type
- preventive
- category
- administrative
Details
- unified_id
- UC-ASSET-02
- title
- Inventory data and document processing activities and flows
- statement
- Maintain inventories of data and corresponding metadata for designated data types, together with records of processing activities capturing purposes, data categories, recipients, retention periods, and safeguards as required by applicable privacy regulation. Maintain representations of authorized network communications and internal and external data flows, such as data-flow diagrams. Review and update these records upon significant change and at least annually so management relies on complete, quality information.
- domain
- Asset Management & Inventory
- control_type
- preventive
- control_category
- administrative
- members
- framework
- nist-csf-2
- control_id
- ID.AM-03
- coverage
- full
- relationship
- superset_of
- framework
- nist-csf-2
- control_id
- ID.AM-07
- coverage
- full
- relationship
- superset_of
- framework
- gdpr
- control_id
- GDPR-Art30
- coverage
- full
- relationship
- superset_of
- framework
- coso-ic
- control_id
- P13
- coverage
- partial
- delta
- COSO expects quality information supporting all internal control components
- relationship
- intersects_with
- guidance
Source
No record-specific source URL is provided.
Connections
- UC-ASSET-02 — Inventory data and document processing activities and flows maps_to ID.AM-03 — Asset Management: Representations of the organization's authorized network communication and internal and external network data flows are maintained
- framework
- nist-csf-2
- control_id
- ID.AM-03
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2.0
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- IT Asset Inventory & Classification Upkeep operates UC-ASSET-02 — Inventory data and document processing activities and flows
- UC-ASSET-02 — Inventory data and document processing activities and flows mitigates Incomplete asset inventory and classification
- strength
- related
- rationale
- The data/information inventory component contributes to overall asset accountability; the systems inventory itself is UC-01.
- UC-ASSET-02 — Inventory data and document processing activities and flows maps_to P13 — The organization obtains or generates and uses relevant, quality information to support the functioning of internal control.
- framework
- coso-ic
- control_id
- P13
- coverage
- partial
- delta
- COSO expects quality information supporting all internal control components
- relationship
- intersects_with
- source_version
- 2013
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-ASSET-02 — Inventory data and document processing activities and flows maps_to GDPR-Art30 — Records of processing activities (RoPA)
- framework
- gdpr
- control_id
- GDPR-Art30
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- Regulation (EU) 2016/679
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-ASSET-02 — Inventory data and document processing activities and flows mitigates Undocumented data inventory and unmapped data flows
- strength
- primary
- rationale
- Maintaining data inventories, RoPA, and data-flow diagrams directly produces the authoritative data-flow record this risk says is absent.
- UC-ASSET-02 — Inventory data and document processing activities and flows maps_to ID.AM-07 — Asset Management: Inventories of data and corresponding metadata for designated data types are maintained
- framework
- nist-csf-2
- control_id
- ID.AM-07
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2.0
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- ISO 27001 SoA Review & Controls Assessment oversees UC-ASSET-02 — Inventory data and document processing activities and flows