{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"operational","domain":["Risk Assessment & Management","Governance, Policy & Oversight"],"inherent_rating":"medium","taxonomy":["coso-erm-risk"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Agov-project-change-management","description":"Large programs — ERP implementations, digital transformations, or major capital projects — fail to deliver expected benefits on time and within budget due to poor governance, scope creep, or capability gaps.","details":{"category":"operational","impact":"medium","inherent_rating":"medium","likelihood":"medium","risk_id":"gov-project-change-management","taxonomies":["coso-erm-risk"],"treatment":"mitigate"},"id":"risk:gov-project-change-management","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Agov-project-change-management","sourceIds":["cobit-2019","iso-27001","iso-31000","nist-csf-2"],"sourceUrl":null,"title":"Major project / program delivery failure","type":"risk"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b9ee85d756575a42f52b717386da075f3819594150c1259ce288f7cd4c991789","properties":{"rationale":"A.5.8 member requires infosec risk addressed in project management from initiation to delivery, contributing to project governance and fewer delivery surprises.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-risk-02-0f8519bb.json","sourceId":"uc:UC-RISK-02","targetDetailPath":"/data/v1/records/risk-gov-project-change-management-335e75ed.json","targetId":"risk:gov-project-change-management","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:dd9d8286abfa7cbc2ff1e138194eeacbd1628516f0f3cee72d3eef79635dc724","properties":{"rationale":"Monitoring programs against expected benefits and terminating underperformers curbs delivery failures.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-13-81b348eb.json","sourceId":"uc:UC-GOV-13","targetDetailPath":"/data/v1/records/risk-gov-project-change-management-335e75ed.json","targetId":"risk:gov-project-change-management","type":"mitigates"}],"schemaVersion":1}