{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"technical","domain":"Financial Reporting Controls (SOX)","type":"preventive"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-ACCESS-20","description":"Transactions and data entering the system are validated for completeness, accuracy, and authorization through edit checks, batch totals, and exception queues. Interfaces and transmissions between systems are controlled with reconciliation, error handling, and timeliness checks, and processing applies complete and accurate logic in the proper period. Outputs and reports are validated and distributed only to authorized recipients.","details":{"control_category":"technical","control_type":"preventive","domain":"Financial Reporting Controls (SOX)","guidance":[],"members":[{"control_id":"SOC1-6","coverage":"full","framework":"soc1","relationship":"superset_of"},{"control_id":"SOC1-7","coverage":"full","framework":"soc1","relationship":"superset_of"},{"control_id":"SOC1-8","coverage":"full","framework":"soc1","relationship":"superset_of"},{"control_id":"SOC1-9","coverage":"full","framework":"soc1","relationship":"superset_of"}],"statement":"Transactions and data entering the system are validated for completeness, accuracy, and authorization through edit checks, batch totals, and exception queues. Interfaces and transmissions between systems are controlled with reconciliation, error handling, and timeliness checks, and processing applies complete and accurate logic in the proper period. Outputs and reports are validated and distributed only to authorized recipients.","title":"Ensure complete, accurate, and authorized data processing","unified_id":"UC-ACCESS-20"},"id":"uc:UC-ACCESS-20","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-ACCESS-20","sourceIds":["soc1"],"sourceUrl":null,"title":"UC-ACCESS-20 — Ensure complete, accurate, and authorized data processing","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:1c5ed5869ef6bfd8447a6778631af2d091fa13a9f89c7c6007ac2e5129a61405","properties":{"control_id":"SOC1-7","coverage":"full","delta":null,"framework":"soc1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"SSAE 18 (current AICPA SOC suite)"},"sourceDetailPath":"/data/v1/records/uc-uc-access-20-92554410.json","sourceId":"uc:UC-ACCESS-20","targetDetailPath":"/data/v1/records/ctrl-soc1-soc1-7-20ea752e.json","targetId":"ctrl:soc1:SOC1-7","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:1f6213c9dc656944e947228339fb9ecba9f1caab746e4243f3dc23145045b565","properties":{},"sourceDetailPath":"/data/v1/records/wf-g8-a2141444.json","sourceId":"wf:G8","targetDetailPath":"/data/v1/records/uc-uc-access-20-92554410.json","targetId":"uc:UC-ACCESS-20","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:303f150d8121d11f1a7baaf39d40fc40dd40ba0a7fcaab174fafe354a8d4b648","properties":{"control_id":"SOC1-9","coverage":"full","delta":null,"framework":"soc1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"SSAE 18 (current AICPA SOC suite)"},"sourceDetailPath":"/data/v1/records/uc-uc-access-20-92554410.json","sourceId":"uc:UC-ACCESS-20","targetDetailPath":"/data/v1/records/ctrl-soc1-soc1-9-7278adb1.json","targetId":"ctrl:soc1:SOC1-9","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:33dcd40af1a39867875bc4253e4c8c4a79e06449acbc0d315f7104aeab6b3ad2","properties":{"control_id":"SOC1-6","coverage":"full","delta":null,"framework":"soc1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"SSAE 18 (current AICPA SOC suite)"},"sourceDetailPath":"/data/v1/records/uc-uc-access-20-92554410.json","sourceId":"uc:UC-ACCESS-20","targetDetailPath":"/data/v1/records/ctrl-soc1-soc1-6-b85280f6.json","targetId":"ctrl:soc1:SOC1-6","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:53321dcf48fee33a1e4347c5d958372eed452f042a342ec40af6ad00679f46f6","properties":{"rationale":"Input edit checks catch journal-entry transposition and format errors before posting.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-access-20-92554410.json","sourceId":"uc:UC-ACCESS-20","targetDetailPath":"/data/v1/records/risk-fin-journal-entry-management-override-b0c0ed68.json","targetId":"risk:fin-journal-entry-management-override","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:5831f09b4e91d11fbc98999fb579abeb0f0b7bf5045e4319571f72809bf642ca","properties":{},"sourceDetailPath":"/data/v1/records/wf-s15-604d223f.json","sourceId":"wf:S15","targetDetailPath":"/data/v1/records/uc-uc-access-20-92554410.json","targetId":"uc:UC-ACCESS-20","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:5f22736e12ef926d9b071321940afbdc54d6227b4d46ccb66c91d0bf3f5c3c89","properties":{"rationale":"Interface reconciliation and output validation preserve completeness/accuracy of data used in reporting.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-access-20-92554410.json","sourceId":"uc:UC-ACCESS-20","targetDetailPath":"/data/v1/records/risk-fin-data-quality-reporting-integrity-276baaa6.json","targetId":"risk:fin-data-quality-reporting-integrity","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7140895cb754da3b3fb1b55b2fb55668cb267adc5c21b8e8bd64f92de8e68b2d","properties":{"rationale":"Proper-period processing contributes, but ACCESS-20 centers on input/interface completeness and accuracy; the operative cut-off controls are period-end close review and automated processing period enforcement.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-access-20-92554410.json","sourceId":"uc:UC-ACCESS-20","targetDetailPath":"/data/v1/records/risk-fin-cutoff-period-errors-180e8bcf.json","targetId":"risk:fin-cutoff-period-errors","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:8e9356e1aafa162e56d7ec0b8878ef0e0ae86695d6b9ef63446429a8dc7225a0","properties":{"rationale":"Authorization validation of inputs reduces unauthorized/fictitious entries entering processing.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-access-20-92554410.json","sourceId":"uc:UC-ACCESS-20","targetDetailPath":"/data/v1/records/risk-fin-existence-overstatement-0e009631.json","targetId":"risk:fin-existence-overstatement","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a91da0cf407c7f7f8372e3661427e45682359b9adc643c7ec5dc243ac1c57827","properties":{"rationale":"Edit checks and batch totals validate processing accuracy, catching calculation and posting errors.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-access-20-92554410.json","sourceId":"uc:UC-ACCESS-20","targetDetailPath":"/data/v1/records/risk-fin-accuracy-measurement-errors-fd727255.json","targetId":"risk:fin-accuracy-measurement-errors","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b1fdc19aba428a2f288414f58d4c6877e17f56f919f2846fa8743e5b6d745dc5","properties":{"rationale":"Batch totals and completeness validation ensure all transactions are captured, preventing unrecorded items.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-access-20-92554410.json","sourceId":"uc:UC-ACCESS-20","targetDetailPath":"/data/v1/records/risk-fin-completeness-understatement-4b9388d1.json","targetId":"risk:fin-completeness-understatement","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b588dd72669f70c111b1d540bb1db20d3797bdc9d35338d28ec08de5a1eb9352","properties":{"control_id":"SOC1-8","coverage":"full","delta":null,"framework":"soc1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"SSAE 18 (current AICPA SOC suite)"},"sourceDetailPath":"/data/v1/records/uc-uc-access-20-92554410.json","sourceId":"uc:UC-ACCESS-20","targetDetailPath":"/data/v1/records/ctrl-soc1-soc1-8-9602488c.json","targetId":"ctrl:soc1:SOC1-8","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c98f016859301db5b87ab34820a1c012b990ef0f66df57ae7d30bb94bbca3443","properties":{"rationale":"Edit checks, batch totals and interface reconciliation catch data-entry and processing execution errors.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-access-20-92554410.json","sourceId":"uc:UC-ACCESS-20","targetDetailPath":"/data/v1/records/risk-ops-process-execution-errors-530a1b11.json","targetId":"risk:ops-process-execution-errors","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:db47613c2d049da118131d5178d0f9553911134f3e28e398e11af7f3d441a6be","properties":{},"sourceDetailPath":"/data/v1/records/wf-c78-90d3f69d.json","sourceId":"wf:C78","targetDetailPath":"/data/v1/records/uc-uc-access-20-92554410.json","targetId":"uc:UC-ACCESS-20","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ebdb4a3ae93de166eb666d65ea73decf2228700a5c1e4a200f91400d12df8718","properties":{},"sourceDetailPath":"/data/v1/records/wf-c76-70fa58ab.json","sourceId":"wf:C76","targetDetailPath":"/data/v1/records/uc-uc-access-20-92554410.json","targetId":"uc:UC-ACCESS-20","type":"operates"}],"schemaVersion":1}