unified
UC-AUDIT-25 — Maintain quality records and information for internal control
The organization obtains or generates and uses relevant, quality information to support the functioning of internal control, with defined expectations for accuracy, completeness, and timeliness. Records are protected against loss, destruction, falsification, and unauthorized access or release, and are retained and disposed of in accordance with retention schedules aligned to legal, regulatory, contractual, and business requirements.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- domain
- Compliance, Audit & Assurance
- type
- preventive
- category
- administrative
Details
- unified_id
- UC-AUDIT-25
- title
- Maintain quality records and information for internal control
- statement
- The organization obtains or generates and uses relevant, quality information to support the functioning of internal control, with defined expectations for accuracy, completeness, and timeliness. Records are protected against loss, destruction, falsification, and unauthorized access or release, and are retained and disposed of in accordance with retention schedules aligned to legal, regulatory, contractual, and business requirements.
- domain
- Compliance, Audit & Assurance
- control_type
- preventive
- control_category
- administrative
- members
- framework
- soc2
- control_id
- CC2.1
- coverage
- full
- relationship
- superset_of
- framework
- iso-27001
- control_id
- A.5.33
- coverage
- full
- relationship
- superset_of
- guidance
Source
No record-specific source URL is provided.
Connections
- Enterprise GRC Platform Integration Bridge oversees UC-AUDIT-25 — Maintain quality records and information for internal control
- SOX Key Control Operation (Close Cycle) operates UC-AUDIT-25 — Maintain quality records and information for internal control
- UC-AUDIT-25 — Maintain quality records and information for internal control maps_to CC2.1 — The entity obtains or generates and uses relevant, quality information to support the functioning of internal control.
- framework
- soc2
- control_id
- CC2.1
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2017 TSC
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- Regulatory Compliance Attestation Cycle oversees UC-AUDIT-25 — Maintain quality records and information for internal control
- Period-End Roll-Forward Testing operates UC-AUDIT-25 — Maintain quality records and information for internal control
- UC-AUDIT-25 — Maintain quality records and information for internal control mitigates Financial-statement fraud and management override
- strength
- related
- rationale
- Protecting records against falsification and unauthorized alteration makes fraudulent transactions harder to record and conceal.
- UC-AUDIT-25 — Maintain quality records and information for internal control maps_to A.5.33 — Protection of records
- framework
- iso-27001
- control_id
- A.5.33
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2022
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- SOC 2 Readiness & Evidence Collection oversees UC-AUDIT-25 — Maintain quality records and information for internal control
- ISO 27001 Stage 1 ISMS Documentation Review tests UC-AUDIT-25 — Maintain quality records and information for internal control
- SOC 2 Reporting and Management Assertion operates UC-AUDIT-25 — Maintain quality records and information for internal control
- ISO 27001 Stage 2 Annex A Controls Audit tests UC-AUDIT-25 — Maintain quality records and information for internal control
- SOC 2 Trust Services Readiness tests UC-AUDIT-25 — Maintain quality records and information for internal control
- Control Library Lifecycle oversees UC-AUDIT-25 — Maintain quality records and information for internal control
- UC-AUDIT-25 — Maintain quality records and information for internal control mitigates Unlawful retention or premature deletion of records
- strength
- primary
- rationale
- Retaining and disposing of records per schedules aligned to legal/regulatory/contractual requirements (ISO A.5.33) prevents unlawful retention and premature deletion.
- Interim Operating Effectiveness Testing operates UC-AUDIT-25 — Maintain quality records and information for internal control
- UC-AUDIT-25 — Maintain quality records and information for internal control mitigates Data-quality and IPE integrity failures in reporting
- strength
- primary
- rationale
- Requiring relevant, quality information with defined accuracy, completeness, and timeliness expectations (CC2.1) reduces reports resting on inaccurate data.
- External Audit Support & PBC operates UC-AUDIT-25 — Maintain quality records and information for internal control