{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"operational","domain":["Risk Assessment & Management","Access Control & Identity Management"],"inherent_rating":"medium","taxonomy":["basel-operational-risk"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Aops-documentation-account-management","description":"Missing signed agreements, incomplete legal/ISDA documentation, unretained KYC/AML records, misfiled client files, unauthorized access to client accounts, and negligent loss of client assets held in custody.","details":{"category":"operational","impact":"medium","inherent_rating":"medium","likelihood":"medium","risk_id":"ops-documentation-account-management","taxonomies":["basel-operational-risk"],"treatment":"mitigate"},"id":"risk:ops-documentation-account-management","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Aops-documentation-account-management","sourceIds":["aiuc-1","gdpr","hipaa","iso-27001","iso-31000","nist-800-53","nist-ai-agent-identity","nist-csf-2"],"sourceUrl":null,"title":"Client intake, documentation and account-management failures","type":"risk"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:9aa7e9a60eb81da8ccb00e16574c965bdbcf79b6aef58e060f1d3616b366beab","properties":{"rationale":"Enforced authorization restricts access to client accounts and data, countering the unauthorized-access-to-client-accounts component.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-access-05-9b7f3e34.json","sourceId":"uc:UC-ACCESS-05","targetDetailPath":"/data/v1/records/risk-ops-documentation-account-management-d25eb1fe.json","targetId":"risk:ops-documentation-account-management","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:bc705a063cbaf0630b6ec6695e7e290d46b65c7cf4a5be3c50e44f5ee369af01","properties":{"rationale":"","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-risk-05-e2fc10a6.json","sourceId":"uc:UC-RISK-05","targetDetailPath":"/data/v1/records/risk-ops-documentation-account-management-d25eb1fe.json","targetId":"risk:ops-documentation-account-management","type":"mitigates"}],"schemaVersion":1}