unified
UC-GOV-10 — Attract, develop, and retain competent personnel
Plan and manage the workforce so the organization attracts, develops, and retains individuals competent for their security and control responsibilities, including qualified cybersecurity personnel sufficient to manage the organization's risks and perform core security functions. Define required competencies, evaluate them periodically, address gaps through training, development, and succession planning, and verify that key security personnel maintain current knowledge of evolving threats and countermeasures.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- domain
- Governance, Policy & Oversight
- type
- preventive
- category
- administrative
Details
- unified_id
- UC-GOV-10
- title
- Attract, develop, and retain competent personnel
- statement
- Plan and manage the workforce so the organization attracts, develops, and retains individuals competent for their security and control responsibilities, including qualified cybersecurity personnel sufficient to manage the organization's risks and perform core security functions. Define required competencies, evaluate them periodically, address gaps through training, development, and succession planning, and verify that key security personnel maintain current knowledge of evolving threats and countermeasures.
- domain
- Governance, Policy & Oversight
- control_type
- preventive
- control_category
- administrative
- members
- framework
- coso-ic
- control_id
- P4
- coverage
- full
- relationship
- superset_of
- framework
- coso-erm
- control_id
- E5
- coverage
- full
- relationship
- superset_of
- framework
- cobit-2019
- control_id
- APO07
- coverage
- partial
- delta
- workforce capacity/utilization planning and contract-staff management, beyond attracting, developing, and retaining competent personnel
- relationship
- intersects_with
- framework
- nydfs-500
- control_id
- 500.10
- coverage
- full
- relationship
- superset_of
- guidance
Source
No record-specific source URL is provided.
Connections
- UC-GOV-10 — Attract, develop, and retain competent personnel maps_to E5 — Attracts, Develops, and Retains Capable Individuals
- framework
- coso-erm
- control_id
- E5
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2017
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-GOV-10 — Attract, develop, and retain competent personnel maps_to APO07 — Managed Human Resources
- framework
- cobit-2019
- control_id
- APO07
- coverage
- partial
- delta
- workforce capacity/utilization planning and contract-staff management, beyond attracting, developing, and retaining competent personnel
- relationship
- intersects_with
- source_version
- 2019
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- CSF 2.0 Profile & Maturity Assessment oversees UC-GOV-10 — Attract, develop, and retain competent personnel
- UC-GOV-10 — Attract, develop, and retain competent personnel maps_to P4 — The organization demonstrates a commitment to attract, develop, and retain competent individuals in alignment with objectives.
- framework
- coso-ic
- control_id
- P4
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2013
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-GOV-10 — Attract, develop, and retain competent personnel mitigates Strategic misalignment and execution failure
- strength
- related
- rationale
- Closing competency gaps supplies the capability strategy execution depends on.
- IT Governance Objective Review (COBIT) oversees UC-GOV-10 — Attract, develop, and retain competent personnel
- Information Security Program Governance Review operates UC-GOV-10 — Attract, develop, and retain competent personnel
- UC-GOV-10 — Attract, develop, and retain competent personnel maps_to 500.10 — Cybersecurity personnel and intelligence
- framework
- nydfs-500
- control_id
- 500.10
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 23 NYCRR 500, Second Amendment
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-GOV-10 — Attract, develop, and retain competent personnel mitigates Organizational change and transformation failure
- strength
- primary
- rationale
- Workforce planning, retention, and succession planning directly reduce the talent-departure loss of capacity the risk names.