{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"index","name":"unified","next":"/assets/agent_indexes-unified-2.a0842c47543ac2fc.json","page":1,"pageSize":100,"records":[{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-01-1e70b922.html","id":"uc:UC-ACCESS-01","title":"UC-ACCESS-01 — Provision and deprovision accounts through a managed lifecycle","type":"unified","url":"/assets/agent_record-uc-uc-access-01-1e70b922.b12b7a9725b4fc37.json"},{"attributes":{"category":"administrative","domain":"Access Control & Identity Management","type":"detective"},"htmlUrl":"/agents/records/uc-uc-access-02-0132e278.html","id":"uc:UC-ACCESS-02","title":"UC-ACCESS-02 — Review user access rights periodically","type":"unified","url":"/assets/agent_record-uc-uc-access-02-0132e278.ca97ed6ca4b97063.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-03-43eeb212.html","id":"uc:UC-ACCESS-03","title":"UC-ACCESS-03 — Enforce least privilege, need-to-know, and segregation of duties","type":"unified","url":"/assets/agent_record-uc-uc-access-03-43eeb212.1c479704e5a29fd1.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-04-75180489.html","id":"uc:UC-ACCESS-04","title":"UC-ACCESS-04 — Restrict privileged rights, utilities, and unauthorized software","type":"unified","url":"/assets/agent_record-uc-uc-access-04-75180489.fa436acb5cc40c3a.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-05-9b7f3e34.html","id":"uc:UC-ACCESS-05","title":"UC-ACCESS-05 — Enforce approved authorizations for information and functions","type":"unified","url":"/assets/agent_record-uc-uc-access-05-9b7f3e34.0445b47866bad2f2.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-06-623f356c.html","id":"uc:UC-ACCESS-06","title":"UC-ACCESS-06 — Manage unique identities and identifiers end to end","type":"unified","url":"/assets/agent_record-uc-uc-access-06-623f356c.69895f654a9033b6.json"},{"attributes":{"category":"administrative","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-07-ed06e251.html","id":"uc:UC-ACCESS-07","title":"UC-ACCESS-07 — Proof identities before binding credentials","type":"unified","url":"/assets/agent_record-uc-uc-access-07-ed06e251.e3dec1ffdaca4c37.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-08-7c9dc13e.html","id":"uc:UC-ACCESS-08","title":"UC-ACCESS-08 — Manage and protect authenticators across their lifecycle","type":"unified","url":"/assets/agent_record-uc-uc-access-08-7c9dc13e.7fcb84f329a75f5c.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-09-444baafe.html","id":"uc:UC-ACCESS-09","title":"UC-ACCESS-09 — Authenticate all users with multi-factor authentication","type":"unified","url":"/assets/agent_record-uc-uc-access-09-444baafe.22c7baaec58ca1b2.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-10-130762ce.html","id":"uc:UC-ACCESS-10","title":"UC-ACCESS-10 — Authenticate devices and services before granting connections","type":"unified","url":"/assets/agent_record-uc-uc-access-10-130762ce.2c23e5dd7ce6091b.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-11-d0c7a1b8.html","id":"uc:UC-ACCESS-11","title":"UC-ACCESS-11 — Defend logons against brute-force and anomalous attempts","type":"unified","url":"/assets/agent_record-uc-uc-access-11-d0c7a1b8.a998b8ec42021f7c.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-12-8ef9e477.html","id":"uc:UC-ACCESS-12","title":"UC-ACCESS-12 — Lock, limit, and terminate user sessions","type":"unified","url":"/assets/agent_record-uc-uc-access-12-8ef9e477.6373a23838a67fdd.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-13-2ccf2dfa.html","id":"uc:UC-ACCESS-13","title":"UC-ACCESS-13 — Notify users of system terms and previous logon activity","type":"unified","url":"/assets/agent_record-uc-uc-access-13-2ccf2dfa.f5a14ac2a3e89367.json"},{"attributes":{"category":"administrative","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-14-99fd72b5.html","id":"uc:UC-ACCESS-14","title":"UC-ACCESS-14 — Authorize public content and external information sharing","type":"unified","url":"/assets/agent_record-uc-uc-access-14-99fd72b5.1629bd47a8e54024.json"},{"attributes":{"category":"administrative","domain":"Governance, Policy & Oversight","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-15-84699cae.html","id":"uc:UC-ACCESS-15","title":"UC-ACCESS-15 — Design control activities over technology access","type":"unified","url":"/assets/agent_record-uc-uc-access-15-84699cae.db42a37f586ee2e8.json"},{"attributes":{"category":"technical","domain":"Secure Configuration & Change Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-16-7a8d6d65.html","id":"uc:UC-ACCESS-16","title":"UC-ACCESS-16 — Authorize, test, and approve changes and development","type":"unified","url":"/assets/agent_record-uc-uc-access-16-7a8d6d65.a9479ac7e20d27aa.json"},{"attributes":{"category":"technical","domain":"Business Continuity & Disaster Recovery","type":"corrective"},"htmlUrl":"/agents/records/uc-uc-access-17-c9ecd00d.html","id":"uc:UC-ACCESS-17","title":"UC-ACCESS-17 — Execute, monitor, and recover production processing","type":"unified","url":"/assets/agent_record-uc-uc-access-17-c9ecd00d.f2bcc32377f37333.json"},{"attributes":{"category":"technical","domain":"Logging, Monitoring & Detection","type":"detective"},"htmlUrl":"/agents/records/uc-uc-access-18-8ffbd456.html","id":"uc:UC-ACCESS-18","title":"UC-ACCESS-18 — Log and monitor system activity, capacity, and incidents","type":"unified","url":"/assets/agent_record-uc-uc-access-18-8ffbd456.d11b57e44d947a51.json"},{"attributes":{"category":"physical","domain":"Physical & Environmental Security","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-19-08a17359.html","id":"uc:UC-ACCESS-19","title":"UC-ACCESS-19 — Restrict physical access and maintain environmental safeguards","type":"unified","url":"/assets/agent_record-uc-uc-access-19-08a17359.beca9cb5fdba3370.json"},{"attributes":{"category":"technical","domain":"Financial Reporting Controls (SOX)","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-20-92554410.html","id":"uc:UC-ACCESS-20","title":"UC-ACCESS-20 — Ensure complete, accurate, and authorized data processing","type":"unified","url":"/assets/agent_record-uc-uc-access-20-92554410.83041cd38745a5c5.json"},{"attributes":{"category":"administrative","domain":"Third-Party / Supply-Chain Risk","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-21-14f45683.html","id":"uc:UC-ACCESS-21","title":"UC-ACCESS-21 — Manage subservice organizations supporting the system","type":"unified","url":"/assets/agent_record-uc-uc-access-21-14f45683.1cff148e3951fa7f.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-01-156cdd4f.html","id":"uc:UC-AI-01","title":"UC-AI-01 — Maintain and periodically review the AI policy","type":"unified","url":"/assets/agent_record-uc-uc-ai-01-156cdd4f.7cfa34c71a377c84.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-02-d2679f4e.html","id":"uc:UC-AI-02","title":"UC-AI-02 — Define AI roles, responsibilities, and competencies","type":"unified","url":"/assets/agent_record-uc-uc-ai-02-d2679f4e.ffdfed94b1a72c8d.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-03-cba029bc.html","id":"uc:UC-AI-03","title":"UC-AI-03 — Document AI system resources and dependencies","type":"unified","url":"/assets/agent_record-uc-uc-ai-03-cba029bc.d7280367f0db98a3.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-04-b35afd39.html","id":"uc:UC-AI-04","title":"UC-AI-04 — Assess impacts and classify AI systems before deployment","type":"unified","url":"/assets/agent_record-uc-uc-ai-04-b35afd39.64f66c3afe30f4a0.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-05-d0edecc1.html","id":"uc:UC-AI-05","title":"UC-AI-05 — Set responsible AI development objectives and requirements","type":"unified","url":"/assets/agent_record-uc-uc-ai-05-d0edecc1.56d9e9a5e170f322.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-06-f47eedcb.html","id":"uc:UC-AI-06","title":"UC-AI-06 — Maintain AI system technical documentation","type":"unified","url":"/assets/agent_record-uc-uc-ai-06-f47eedcb.92614b6e9a06ed1d.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-07-9c5c9573.html","id":"uc:UC-AI-07","title":"UC-AI-07 — Verify, validate, and control AI deployment and changes","type":"unified","url":"/assets/agent_record-uc-uc-ai-07-9c5c9573.237549d1b4b3d490.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"detective"},"htmlUrl":"/agents/records/uc-uc-ai-08-fada68b7.html","id":"uc:UC-AI-08","title":"UC-AI-08 — Log and monitor AI system behavior in operation","type":"unified","url":"/assets/agent_record-uc-uc-ai-08-fada68b7.0dccf36f31d43ffc.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-09-d6934cb6.html","id":"uc:UC-AI-09","title":"UC-AI-09 — Govern AI data quality, provenance, and preparation","type":"unified","url":"/assets/agent_record-uc-uc-ai-09-d6934cb6.fc78fe4a2d6a795a.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-10-f53dd533.html","id":"uc:UC-AI-10","title":"UC-AI-10 — Meet transparency obligations for AI systems","type":"unified","url":"/assets/agent_record-uc-uc-ai-10-f53dd533.bbb269e99d48c70e.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"detective"},"htmlUrl":"/agents/records/uc-uc-ai-11-7112e573.html","id":"uc:UC-AI-11","title":"UC-AI-11 — Operate AI concern, incident, and external reporting channels","type":"unified","url":"/assets/agent_record-uc-uc-ai-11-7112e573.dc3c6f43eab999c0.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-12-ff5c3c6a.html","id":"uc:UC-AI-12","title":"UC-AI-12 — Enforce responsible and lawful use of AI systems","type":"unified","url":"/assets/agent_record-uc-uc-ai-12-ff5c3c6a.54fcbd7542a29816.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-13-2ce71d80.html","id":"uc:UC-AI-13","title":"UC-AI-13 — Assign AI value-chain roles and discharge obligations","type":"unified","url":"/assets/agent_record-uc-uc-ai-13-2ce71d80.759f639ed4495f4c.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-14-cc67739e.html","id":"uc:UC-AI-14","title":"UC-AI-14 — Manage responsible AI with suppliers and customers","type":"unified","url":"/assets/agent_record-uc-uc-ai-14-cc67739e.ea73200d18c59165.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-15-eb9589c6.html","id":"uc:UC-AI-15","title":"UC-AI-15 — Fulfill general-purpose AI model provider obligations","type":"unified","url":"/assets/agent_record-uc-uc-ai-15-eb9589c6.75fa86afcb201863.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-16-b95e2895.html","id":"uc:UC-AI-16","title":"UC-AI-16 — Ensure human oversight of AI decisions","type":"unified","url":"/assets/agent_record-uc-uc-ai-16-b95e2895.873eef20b5bbf04c.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-17-420198e3.html","id":"uc:UC-AI-17","title":"UC-AI-17 — Define customer data-use and output-rights policies for AI services","type":"unified","url":"/assets/agent_record-uc-uc-ai-17-420198e3.94feecc6512a5fd9.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-18-f15ac93a.html","id":"uc:UC-AI-18","title":"UC-AI-18 — Defend AI interfaces against adversarial input, injection, and endpoint abuse","type":"unified","url":"/assets/agent_record-uc-uc-ai-18-f15ac93a.ca79ba4b7f946767.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-19-535f3660.html","id":"uc:UC-AI-19","title":"UC-AI-19 — Constrain agent actions and tool use to authorized scope","type":"unified","url":"/assets/agent_record-uc-uc-ai-19-535f3660.3f22307bbad552d5.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-20-c0e507ce.html","id":"uc:UC-AI-20","title":"UC-AI-20 — Prevent harmful, out-of-scope, hallucinated, and over-exposed AI outputs","type":"unified","url":"/assets/agent_record-uc-uc-ai-20-c0e507ce.8527cdade05823b8.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"detective"},"htmlUrl":"/agents/records/uc-uc-ai-21-8afd47db.html","id":"uc:UC-AI-21","title":"UC-AI-21 — Commission independent third-party AI evaluations on a quarterly cadence","type":"unified","url":"/assets/agent_record-uc-uc-ai-21-8afd47db.98db4ebd6505a2d6.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-22-129d1e22.html","id":"uc:UC-AI-22","title":"UC-AI-22 — Prevent leakage of credentials and secrets through AI systems","type":"unified","url":"/assets/agent_record-uc-uc-ai-22-129d1e22.fd65391ae4d5351e.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-23-ea85f10d.html","id":"uc:UC-AI-23","title":"UC-AI-23 — Prevent misuse of AI systems for cyber offense and catastrophic harm","type":"unified","url":"/assets/agent_record-uc-uc-ai-23-ea85f10d.6ee879180fb176ee.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-24-066ea393.html","id":"uc:UC-AI-24","title":"UC-AI-24 — Operate an AI quality management system","type":"unified","url":"/assets/agent_record-uc-uc-ai-24-066ea393.534235fdf4b03654.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-25-21e48906.html","id":"uc:UC-AI-25","title":"UC-AI-25 — Guide code-generating systems toward secure patterns and safe dependencies","type":"unified","url":"/assets/agent_record-uc-uc-ai-25-21e48906.7e2d23725ba34339.json"},{"attributes":{"category":"administrative","domain":"Asset Management & Inventory","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-asset-01-04dbd5db.html","id":"uc:UC-ASSET-01","title":"UC-ASSET-01 — Maintain a complete inventory of systems, hardware, and software","type":"unified","url":"/assets/agent_record-uc-uc-asset-01-04dbd5db.40177de2354be192.json"},{"attributes":{"category":"administrative","domain":"Asset Management & Inventory","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-asset-02-6c6ac61b.html","id":"uc:UC-ASSET-02","title":"UC-ASSET-02 — Inventory data and document processing activities and flows","type":"unified","url":"/assets/agent_record-uc-uc-asset-02-6c6ac61b.b1efa69e3b193c21.json"},{"attributes":{"category":"administrative","domain":"Asset Management & Inventory","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-asset-03-3e6216cd.html","id":"uc:UC-ASSET-03","title":"UC-ASSET-03 — Classify, prioritize, and label information and assets","type":"unified","url":"/assets/agent_record-uc-uc-asset-03-3e6216cd.54a94383f55d90fc.json"},{"attributes":{"category":"physical","domain":"Asset Management & Inventory","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-asset-04-347e095f.html","id":"uc:UC-ASSET-04","title":"UC-ASSET-04 — Control storage media through use, storage, and destruction","type":"unified","url":"/assets/agent_record-uc-uc-asset-04-347e095f.da02cc6f4bdfcee0.json"},{"attributes":{"category":"administrative","domain":"Asset Management & Inventory","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-asset-05-11852f6d.html","id":"uc:UC-ASSET-05","title":"UC-ASSET-05 — Inventory supplier services and assess critical suppliers","type":"unified","url":"/assets/agent_record-uc-uc-asset-05-11852f6d.8db488362053f816.json"},{"attributes":{"category":"administrative","domain":"Asset Management & Inventory","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-asset-06-d13d9c7f.html","id":"uc:UC-ASSET-06","title":"UC-ASSET-06 — Govern acceptable use of endpoints, off-site, and external systems","type":"unified","url":"/assets/agent_record-uc-uc-asset-06-d13d9c7f.000e5adb2474feea.json"},{"attributes":{"category":"administrative","domain":"Asset Management & Inventory","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-asset-07-5039208b.html","id":"uc:UC-ASSET-07","title":"UC-ASSET-07 — Manage assets through their life cycle and recover them at exit","type":"unified","url":"/assets/agent_record-uc-uc-asset-07-5039208b.9495f48436e522f7.json"},{"attributes":{"category":"administrative","domain":"Asset Management & Inventory","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-asset-08-7413af1c.html","id":"uc:UC-ASSET-08","title":"UC-ASSET-08 — Transfer information securely under defined rules and agreements","type":"unified","url":"/assets/agent_record-uc-uc-asset-08-7413af1c.ff3a82059f72c12c.json"},{"attributes":{"category":"administrative","domain":"Vulnerability & Patch Management","type":"detective"},"htmlUrl":"/agents/records/uc-uc-asset-09-911f6a6c.html","id":"uc:UC-ASSET-09","title":"UC-ASSET-09 — Receive, analyze, and act on threat and vulnerability intelligence","type":"unified","url":"/assets/agent_record-uc-uc-asset-09-911f6a6c.427fbd2a016fc5af.json"},{"attributes":{"category":"administrative","domain":"Risk Assessment & Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-asset-10-bbda2a79.html","id":"uc:UC-ASSET-10","title":"UC-ASSET-10 — Assess and track changes and exceptions for risk impact","type":"unified","url":"/assets/agent_record-uc-uc-asset-10-bbda2a79.c145a3c38996d932.json"},{"attributes":{"category":"administrative","domain":"Incident Management & Response","type":"corrective"},"htmlUrl":"/agents/records/uc-uc-asset-11-714d9672.html","id":"uc:UC-ASSET-11","title":"UC-ASSET-11 — Improve security plans and processes from operational lessons","type":"unified","url":"/assets/agent_record-uc-uc-asset-11-714d9672.43c888cc369c5371.json"},{"attributes":{"category":"technical","domain":"Business Continuity & Disaster Recovery","type":"detective"},"htmlUrl":"/agents/records/uc-uc-asset-12-32fbbd73.html","id":"uc:UC-ASSET-12","title":"UC-ASSET-12 — Operate scheduled processing, backup, and availability monitoring","type":"unified","url":"/assets/agent_record-uc-uc-asset-12-32fbbd73.7646212d8b53e8e0.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-01-10668058.html","id":"uc:UC-AUDIT-01","title":"UC-AUDIT-01 — Maintain an independent internal audit function","type":"unified","url":"/assets/agent_record-uc-uc-audit-01-10668058.4f053525b2ba16b7.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-02-0279f203.html","id":"uc:UC-AUDIT-02","title":"UC-AUDIT-02 — Establish a board-approved internal audit mandate and charter","type":"unified","url":"/assets/agent_record-uc-uc-audit-02-0279f203.6c322637d75a9376.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-03-927ae903.html","id":"uc:UC-AUDIT-03","title":"UC-AUDIT-03 — Ensure board oversight and support of internal audit","type":"unified","url":"/assets/agent_record-uc-uc-audit-03-927ae903.889ac2be0e3c34ac.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-04-c880e18f.html","id":"uc:UC-AUDIT-04","title":"UC-AUDIT-04 — Uphold integrity and ethical conduct in internal auditing","type":"unified","url":"/assets/agent_record-uc-uc-audit-04-c880e18f.028bbf920e99fdfc.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-05-3332a81f.html","id":"uc:UC-AUDIT-05","title":"UC-AUDIT-05 — Maintain auditor objectivity and disclose impairments","type":"unified","url":"/assets/agent_record-uc-uc-audit-05-3332a81f.e0f66febc0dfd61b.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-06-3a5916e0.html","id":"uc:UC-AUDIT-06","title":"UC-AUDIT-06 — Ensure auditor competency and continuing development","type":"unified","url":"/assets/agent_record-uc-uc-audit-06-3a5916e0.d6b10f6f3f3299f6.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-07-50f8c2fa.html","id":"uc:UC-AUDIT-07","title":"UC-AUDIT-07 — Exercise due professional care and professional skepticism","type":"unified","url":"/assets/agent_record-uc-uc-audit-07-50f8c2fa.40c248f23e43c4af.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-08-b0e8d44c.html","id":"uc:UC-AUDIT-08","title":"UC-AUDIT-08 — Protect confidential information obtained in audit work","type":"unified","url":"/assets/agent_record-uc-uc-audit-08-b0e8d44c.d94c638ff76f3c8e.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-09-f23ecfe4.html","id":"uc:UC-AUDIT-09","title":"UC-AUDIT-09 — Develop a risk-based internal audit strategy and plan","type":"unified","url":"/assets/agent_record-uc-uc-audit-09-f23ecfe4.100ca5d1f5dd78b5.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-10-fc9abe7f.html","id":"uc:UC-AUDIT-10","title":"UC-AUDIT-10 — Manage internal audit financial, human, and technology resources","type":"unified","url":"/assets/agent_record-uc-uc-audit-10-fc9abe7f.24ee75becd6fd243.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-11-80294fe7.html","id":"uc:UC-AUDIT-11","title":"UC-AUDIT-11 — Establish audit methodologies and engagement work programs","type":"unified","url":"/assets/agent_record-uc-uc-audit-11-80294fe7.1fc940ec5afd51ff.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-12-657c1271.html","id":"uc:UC-AUDIT-12","title":"UC-AUDIT-12 — Plan engagements with risk-based objectives, scope, and criteria","type":"unified","url":"/assets/agent_record-uc-uc-audit-12-657c1271.134fff136878eb6d.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/agents/records/uc-uc-audit-13-3dae730e.html","id":"uc:UC-AUDIT-13","title":"UC-AUDIT-13 — Gather and analyze evidence to develop engagement findings","type":"unified","url":"/assets/agent_record-uc-uc-audit-13-3dae730e.1c05c6eae1d32013.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/agents/records/uc-uc-audit-14-5c0dbe8f.html","id":"uc:UC-AUDIT-14","title":"UC-AUDIT-14 — Evaluate findings and develop recommendations and action plans","type":"unified","url":"/assets/agent_record-uc-uc-audit-14-5c0dbe8f.27f302121654e09d.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-15-18fe3d07.html","id":"uc:UC-AUDIT-15","title":"UC-AUDIT-15 — Document and supervise engagement work","type":"unified","url":"/assets/agent_record-uc-uc-audit-15-18fe3d07.8387e1463743d203.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/agents/records/uc-uc-audit-16-03aa1161.html","id":"uc:UC-AUDIT-16","title":"UC-AUDIT-16 — Communicate final engagement results to stakeholders","type":"unified","url":"/assets/agent_record-uc-uc-audit-16-03aa1161.78f99ae281331461.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/agents/records/uc-uc-audit-17-94dc7e0c.html","id":"uc:UC-AUDIT-17","title":"UC-AUDIT-17 — Follow up on findings and escalate risk acceptance","type":"unified","url":"/assets/agent_record-uc-uc-audit-17-94dc7e0c.0145db37ced20924.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-18-7ab55995.html","id":"uc:UC-AUDIT-18","title":"UC-AUDIT-18 — Communicate with stakeholders on assurance matters","type":"unified","url":"/assets/agent_record-uc-uc-audit-18-7ab55995.0e1a830840bdbff0.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/agents/records/uc-uc-audit-19-a0f61a19.html","id":"uc:UC-AUDIT-19","title":"UC-AUDIT-19 — Operate an audit quality assurance and improvement program","type":"unified","url":"/assets/agent_record-uc-uc-audit-19-a0f61a19.459f6bf5a2675910.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/agents/records/uc-uc-audit-20-6032484b.html","id":"uc:UC-AUDIT-20","title":"UC-AUDIT-20 — Obtain external quality assessments of internal audit","type":"unified","url":"/assets/agent_record-uc-uc-audit-20-6032484b.ae5f051bfae4d1eb.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/agents/records/uc-uc-audit-21-6406caa4.html","id":"uc:UC-AUDIT-21","title":"UC-AUDIT-21 — Assess control effectiveness through testing and monitoring","type":"unified","url":"/assets/agent_record-uc-uc-audit-21-6406caa4.bee9f35821204c1f.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/agents/records/uc-uc-audit-22-2a70149b.html","id":"uc:UC-AUDIT-22","title":"UC-AUDIT-22 — Review risk strategy and performance with leadership","type":"unified","url":"/assets/agent_record-uc-uc-audit-22-2a70149b.950b0349af8a678b.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/agents/records/uc-uc-audit-23-124d94d5.html","id":"uc:UC-AUDIT-23","title":"UC-AUDIT-23 — Coordinate independent assurance reviews across providers","type":"unified","url":"/assets/agent_record-uc-uc-audit-23-124d94d5.9beb44d85e6248c7.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/agents/records/uc-uc-audit-24-fa96fe18.html","id":"uc:UC-AUDIT-24","title":"UC-AUDIT-24 — Manage compliance with external legal and regulatory requirements","type":"unified","url":"/assets/agent_record-uc-uc-audit-24-fa96fe18.59cb29f0f6f79f6b.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-25-e23c8618.html","id":"uc:UC-AUDIT-25","title":"UC-AUDIT-25 — Maintain quality records and information for internal control","type":"unified","url":"/assets/agent_record-uc-uc-audit-25-e23c8618.637454df447dcc9a.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-26-3a91d068.html","id":"uc:UC-AUDIT-26","title":"UC-AUDIT-26 — Authorize systems and internal connections before operation","type":"unified","url":"/assets/agent_record-uc-uc-audit-26-3a91d068.cedeeb3935437442.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-27-b7e48974.html","id":"uc:UC-AUDIT-27","title":"UC-AUDIT-27 — Govern expanded internal audit ERM responsibilities","type":"unified","url":"/assets/agent_record-uc-uc-audit-27-b7e48974.99d46a06afc6330e.json"},{"attributes":{"category":"administrative","domain":"Business Continuity & Disaster Recovery","type":"corrective"},"htmlUrl":"/agents/records/uc-uc-bcdr-01-428f23d3.html","id":"uc:UC-BCDR-01","title":"UC-BCDR-01 — Maintain business continuity and disaster recovery plans","type":"unified","url":"/assets/agent_record-uc-uc-bcdr-01-428f23d3.f54a7c00abbe75cb.json"},{"attributes":{"category":"administrative","domain":"Business Continuity & Disaster Recovery","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-bcdr-02-2a51c24c.html","id":"uc:UC-BCDR-02","title":"UC-BCDR-02 — Establish and govern an ICT operational resilience framework","type":"unified","url":"/assets/agent_record-uc-uc-bcdr-02-2a51c24c.ad7ee14201ae473c.json"},{"attributes":{"category":"technical","domain":"Business Continuity & Disaster Recovery","type":"corrective"},"htmlUrl":"/agents/records/uc-uc-bcdr-03-d30f4ccf.html","id":"uc:UC-BCDR-03","title":"UC-BCDR-03 — Back up data and verify restorability","type":"unified","url":"/assets/agent_record-uc-uc-bcdr-03-d30f4ccf.6b04bef4b9e2f83c.json"},{"attributes":{"category":"technical","domain":"Business Continuity & Disaster Recovery","type":"corrective"},"htmlUrl":"/agents/records/uc-uc-bcdr-04-5d004f42.html","id":"uc:UC-BCDR-04","title":"UC-BCDR-04 — Provide redundant and alternate processing, storage, and telecom","type":"unified","url":"/assets/agent_record-uc-uc-bcdr-04-5d004f42.d6c37327f861e011.json"},{"attributes":{"category":"technical","domain":"Business Continuity & Disaster Recovery","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-bcdr-05-f73361f2.html","id":"uc:UC-BCDR-05","title":"UC-BCDR-05 — Manage capacity to meet availability requirements","type":"unified","url":"/assets/agent_record-uc-uc-bcdr-05-f73361f2.c4afeb4535961b4e.json"},{"attributes":{"category":"administrative","domain":"Business Continuity & Disaster Recovery","type":"corrective"},"htmlUrl":"/agents/records/uc-uc-bcdr-06-c505e5bd.html","id":"uc:UC-BCDR-06","title":"UC-BCDR-06 — Resolve operational incidents and eliminate root causes","type":"unified","url":"/assets/agent_record-uc-uc-bcdr-06-c505e5bd.6d6cd6f9a1129bae.json"},{"attributes":{"category":"technical","domain":"Business Continuity & Disaster Recovery","type":"corrective"},"htmlUrl":"/agents/records/uc-uc-bcdr-07-e5d74596.html","id":"uc:UC-BCDR-07","title":"UC-BCDR-07 — Execute recovery plans to restore systems and operations","type":"unified","url":"/assets/agent_record-uc-uc-bcdr-07-e5d74596.1e433699fd60fe6b.json"},{"attributes":{"category":"administrative","domain":"Business Continuity & Disaster Recovery","type":"corrective"},"htmlUrl":"/agents/records/uc-uc-bcdr-08-6e625399.html","id":"uc:UC-BCDR-08","title":"UC-BCDR-08 — Declare recovery complete and set post-incident norms","type":"unified","url":"/assets/agent_record-uc-uc-bcdr-08-6e625399.8ed07532f1d425ae.json"},{"attributes":{"category":"administrative","domain":"Business Continuity & Disaster Recovery","type":"corrective"},"htmlUrl":"/agents/records/uc-uc-bcdr-09-c9025680.html","id":"uc:UC-BCDR-09","title":"UC-BCDR-09 — Communicate recovery status to stakeholders","type":"unified","url":"/assets/agent_record-uc-uc-bcdr-09-c9025680.36c5d7fe42496d5a.json"},{"attributes":{"category":"administrative","domain":"Business Continuity & Disaster Recovery","type":"detective"},"htmlUrl":"/agents/records/uc-uc-bcdr-10-602160e4.html","id":"uc:UC-BCDR-10","title":"UC-BCDR-10 — Test recovery capabilities and train contingency personnel","type":"unified","url":"/assets/agent_record-uc-uc-bcdr-10-602160e4.a2451b53187d3302.json"},{"attributes":{"category":"technical","domain":"Business Continuity & Disaster Recovery","type":"corrective"},"htmlUrl":"/agents/records/uc-uc-bcdr-11-c3dddae2.html","id":"uc:UC-BCDR-11","title":"UC-BCDR-11 — Sustain operations via safe modes and alternate mechanisms","type":"unified","url":"/assets/agent_record-uc-uc-bcdr-11-c3dddae2.6187f31ea3a389a0.json"},{"attributes":{"category":"administrative","domain":"Business Continuity & Disaster Recovery","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-bcdr-12-0d9cc358.html","id":"uc:UC-BCDR-12","title":"UC-BCDR-12 — Operate IT services according to defined procedures","type":"unified","url":"/assets/agent_record-uc-uc-bcdr-12-0d9cc358.dad727395dd0a42b.json"},{"attributes":{"category":"technical","domain":"Logging, Monitoring & Detection","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-bcdr-13-aa7feb8e.html","id":"uc:UC-BCDR-13","title":"UC-BCDR-13 — Operate continuous security protection services","type":"unified","url":"/assets/agent_record-uc-uc-bcdr-13-aa7feb8e.547f311388ec6037.json"},{"attributes":{"category":"administrative","domain":"Financial Reporting Controls (SOX)","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-bcdr-14-997de451.html","id":"uc:UC-BCDR-14","title":"UC-BCDR-14 — Embed control activities in business processes","type":"unified","url":"/assets/agent_record-uc-uc-bcdr-14-997de451.6cbfb2a3c1707bc3.json"},{"attributes":{"category":"administrative","domain":"Vulnerability & Patch Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-bcdr-16-462251f1.html","id":"uc:UC-BCDR-16","title":"UC-BCDR-16 — Participate in cyber threat intelligence sharing","type":"unified","url":"/assets/agent_record-uc-uc-bcdr-16-462251f1.ec4600d14fbded7a.json"}],"schemaVersion":1,"total":289}