{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"financial_reporting","domain":["Financial Reporting Controls (SOX)","Data Protection & Privacy","Compliance, Audit & Assurance"],"inherent_rating":"high","taxonomy":["enterprise-risk","coso-erm-risk"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Afin-data-quality-reporting-integrity","description":"Poor data lineage, inconsistent master-data definitions, or uncontrolled data transformation (weak IPE completeness/accuracy) cause management decisions and regulatory reports to rest on inaccurate or incomplete data.","details":{"category":"financial_reporting","impact":"high","inherent_rating":"high","likelihood":"medium","risk_id":"fin-data-quality-reporting-integrity","taxonomies":["enterprise-risk","coso-erm-risk"],"treatment":"mitigate"},"id":"risk:fin-data-quality-reporting-integrity","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Afin-data-quality-reporting-integrity","sourceIds":["cobit-2019","iso-27001","soc1","soc2","sox"],"sourceUrl":null,"title":"Data-quality and IPE integrity failures in reporting","type":"risk"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:09382bcceec855e05ba63bae60745ad7ba04e455a53d7670e9ca079451bfd058","properties":{"rationale":"Input validation improves source-data quality feeding downstream reporting.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-fin-06-ccd6f7dc.json","sourceId":"uc:UC-FIN-06","targetDetailPath":"/data/v1/records/risk-fin-data-quality-reporting-integrity-276baaa6.json","targetId":"risk:fin-data-quality-reporting-integrity","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3dc83163693fc5df12cfa9f8089d93cdf357122f4f06b3271e1dba5c8be3c6ab","properties":{"rationale":"Protecting stored records against loss/unauthorized alteration preserves data integrity and retention.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-fin-10-f87a53c1.json","sourceId":"uc:UC-FIN-10","targetDetailPath":"/data/v1/records/risk-fin-data-quality-reporting-integrity-276baaa6.json","targetId":"risk:fin-data-quality-reporting-integrity","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:40602c949ab347d876ec0daac4bf4648a96f26b1e954b9e0c4418d7b6c413d25","properties":{"rationale":"Subledger-to-GL reconciliation enforces data consistency across systems.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-fin-03-a90abe13.json","sourceId":"uc:UC-FIN-03","targetDetailPath":"/data/v1/records/risk-fin-data-quality-reporting-integrity-276baaa6.json","targetId":"risk:fin-data-quality-reporting-integrity","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:47b9cf23fed9101fa9fe22188f873bf2c719d4e3fd1e59f5eadccd3644933184","properties":{"rationale":"This is the IPE control: validating source data, logic and totals of reports/spreadsheets before reliance.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-fin-09-05f62d2c.json","sourceId":"uc:UC-FIN-09","targetDetailPath":"/data/v1/records/risk-fin-data-quality-reporting-integrity-276baaa6.json","targetId":"risk:fin-data-quality-reporting-integrity","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:5545b35b6fd0a270714ad640e985999d25ea9214313ea7571880695cbd52b78a","properties":{"rationale":"Interface reconciliation controls data-transfer integrity and lineage across systems.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-fin-08-8e7468dd.json","sourceId":"uc:UC-FIN-08","targetDetailPath":"/data/v1/records/risk-fin-data-quality-reporting-integrity-276baaa6.json","targetId":"risk:fin-data-quality-reporting-integrity","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:5f22736e12ef926d9b071321940afbdc54d6227b4d46ccb66c91d0bf3f5c3c89","properties":{"rationale":"Interface reconciliation and output validation preserve completeness/accuracy of data used in reporting.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-access-20-92554410.json","sourceId":"uc:UC-ACCESS-20","targetDetailPath":"/data/v1/records/risk-fin-data-quality-reporting-integrity-276baaa6.json","targetId":"risk:fin-data-quality-reporting-integrity","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:953e21cca1159048452069dfc6052ae60e2074a70a0485478dc870a4537273c8","properties":{"rationale":"Traceability contributes to integrity, but this is the design-level 'embed controls' practice; operative data-quality controls are IPE validation and interface reconciliation.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-14-997de451.json","sourceId":"uc:UC-BCDR-14","targetDetailPath":"/data/v1/records/risk-fin-data-quality-reporting-integrity-276baaa6.json","targetId":"risk:fin-data-quality-reporting-integrity","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f6357e84407972425a77ced74650fa4cf04fc4cb758835afeb85e55242d3908b","properties":{"rationale":"Requiring relevant, quality information with defined accuracy, completeness, and timeliness expectations (CC2.1) reduces reports resting on inaccurate data.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-25-e23c8618.json","sourceId":"uc:UC-AUDIT-25","targetDetailPath":"/data/v1/records/risk-fin-data-quality-reporting-integrity-276baaa6.json","targetId":"risk:fin-data-quality-reporting-integrity","type":"mitigates"}],"schemaVersion":1}