unified
UC-CONFIG-10 — Map where information resides and how data is processed
Identify and document the location of information and the specific system components on which it is processed and stored, including designated data types such as personally identifiable information. Develop and maintain a map of system data actions covering collection, processing, storage, and transmission, and update location and mapping documentation upon change.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- domain
- Secure Configuration & Change Management
- type
- preventive
- category
- administrative
Details
- unified_id
- UC-CONFIG-10
- title
- Map where information resides and how data is processed
- statement
- Identify and document the location of information and the specific system components on which it is processed and stored, including designated data types such as personally identifiable information. Develop and maintain a map of system data actions covering collection, processing, storage, and transmission, and update location and mapping documentation upon change.
- domain
- Secure Configuration & Change Management
- control_type
- preventive
- control_category
- administrative
- members
- framework
- nist-800-53
- control_id
- CM-12
- coverage
- partial
- delta
- documenting which users have access to components where information resides
- relationship
- intersects_with
- framework
- nist-800-53
- control_id
- CM-13
- coverage
- full
- relationship
- superset_of
- framework
- aiuc-1
- control_id
- E011
- coverage
- partial
- delta
- a customer-facing record of the regions and sub-processors where AI inputs and outputs are processed and stored
- relationship
- intersects_with
- guidance
Source
No record-specific source URL is provided.
Connections
- UC-CONFIG-10 — Map where information resides and how data is processed maps_to CM-13 — Data Action Mapping
- framework
- nist-800-53
- control_id
- CM-13
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- Rev. 5
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-CONFIG-10 — Map where information resides and how data is processed maps_to CM-12 — Information Location
- framework
- nist-800-53
- control_id
- CM-12
- coverage
- partial
- delta
- documenting which users have access to components where information resides
- relationship
- intersects_with
- source_version
- Rev. 5
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-CONFIG-10 — Map where information resides and how data is processed maps_to E011 — Record processing locations
- framework
- aiuc-1
- control_id
- E011
- coverage
- partial
- delta
- a customer-facing record of the regions and sub-processors where AI inputs and outputs are processed and stored
- relationship
- intersects_with
- source_version
- July 15, 2026 release (quarterly update cadence)
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- IT Asset Inventory & Classification Upkeep operates UC-CONFIG-10 — Map where information resides and how data is processed
- System and Third-Party Risk Review operates UC-CONFIG-10 — Map where information resides and how data is processed
- UC-CONFIG-10 — Map where information resides and how data is processed mitigates Internet-exposed or misconfigured systems
- strength
- related
- rationale
- Mapping where information and processing components reside surfaces data on unauthorized or misconfigured systems for remediation; it enables but is not the hardening defense.
- Security Control Assessment & POA&M Remediation tests UC-CONFIG-10 — Map where information resides and how data is processed