{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"operational","domain":["Access Control & Identity Management","Risk Assessment & Management"],"inherent_rating":"high","taxonomy":["basel-operational-risk","coso-erm-risk"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Afraud-external","description":"Third parties defraud the entity: cheque/payment-card forgery, counterfeit currency, identity theft, account takeover with stolen credentials, fraudulent loan applications, and first-party (bust-out) fraud by customers.","details":{"category":"operational","impact":"high","inherent_rating":"high","likelihood":"high","risk_id":"fraud-external","taxonomies":["basel-operational-risk","coso-erm-risk"],"treatment":"mitigate"},"id":"risk:fraud-external","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Afraud-external","sourceIds":["hipaa","iso-27001","nist-800-53","nist-ai-agent-identity","nist-csf-2","nydfs-500","pci-dss","soc2"],"sourceUrl":null,"title":"External fraud — third-party theft, forgery, payment and account fraud","type":"risk"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:301e71987910971887fd90ce636fe5692599db162efe0e95c494e05888462f04","properties":{"rationale":"Risk-based anomaly signals and lockout directly detect and block credential-stuffing account takeover.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-access-11-d0c7a1b8.json","sourceId":"uc:UC-ACCESS-11","targetDetailPath":"/data/v1/records/risk-fraud-external-c3ce412f.json","targetId":"risk:fraud-external","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:9d65cd0f17251d7ebc72a86ac628ea268fbb23b5dea6f5bd202ff6004f657375","properties":{"rationale":"Strong, rotated authenticators revoked on compromise reduce stolen-credential account takeover.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-access-08-7c9dc13e.json","sourceId":"uc:UC-ACCESS-08","targetDetailPath":"/data/v1/records/risk-fraud-external-c3ce412f.json","targetId":"risk:fraud-external","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a298d20beb96fc664a4303769fbb08b723e4c7e231bce73d8a3bdbad4036e729","properties":{"rationale":"Threat intel on fraud campaigns and hunting for indicators of account compromise help surface credential-theft account takeover, alongside auth/monitoring defenses.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-risk-17-4ea73b39.json","sourceId":"uc:UC-RISK-17","targetDetailPath":"/data/v1/records/risk-fraud-external-c3ce412f.json","targetId":"risk:fraud-external","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d53c701c43ab6a4b4b04a464375427c010fca2d05266dd96abac0fad6dbe248f","properties":{"rationale":"Member logical-access security over protected assets (SOC2 CC6.1) directly defends against credential-based account takeover.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-asset-01-04dbd5db.json","sourceId":"uc:UC-ASSET-01","targetDetailPath":"/data/v1/records/risk-fraud-external-c3ce412f.json","targetId":"risk:fraud-external","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e4154853364b51c8bc8f32aa2c60f4204387aa60d9e50b26003091aebe11e234","properties":{"rationale":"Last-logon notification helps users spot stolen-credential account takeover early.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-access-13-2ccf2dfa.json","sourceId":"uc:UC-ACCESS-13","targetDetailPath":"/data/v1/records/risk-fraud-external-c3ce412f.json","targetId":"risk:fraud-external","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f62bc12363b88d2a2532db52ba69792e4010cf7b96f0aa647a145a846a23c2a7","properties":{"rationale":"MFA directly defeats account takeover using stolen credentials.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-access-09-444baafe.json","sourceId":"uc:UC-ACCESS-09","targetDetailPath":"/data/v1/records/risk-fraud-external-c3ce412f.json","targetId":"risk:fraud-external","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ff1debb0055a7dda0745759d2de2328211ae0f94177e7f7e021345b436afb472","properties":{"rationale":"Evidence-based identity proofing before credential issuance, with re-proofing on recovery, directly defeats identity theft, impersonation, and fraudulent-application account fraud.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-access-07-ed06e251.json","sourceId":"uc:UC-ACCESS-07","targetDetailPath":"/data/v1/records/risk-fraud-external-c3ce412f.json","targetId":"risk:fraud-external","type":"mitigates"}],"schemaVersion":1}