{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-AI-03","description":"Maintain a documented inventory of the resources each AI system depends on, covering data resources, tooling such as frameworks, libraries, and models, and system and computing resources, together with their owners and locations. Record sufficient detail for each resource to support impact assessment, reproducibility, and supplier accountability. Keep the inventory current through the change process and review it periodically.","details":{"control_category":"administrative","control_type":"preventive","domain":"AI Governance","guidance":[],"members":[{"control_id":"A.4.2","coverage":"full","framework":"iso-42001","relationship":"superset_of"},{"control_id":"A.4.3","coverage":"full","framework":"iso-42001","relationship":"superset_of"},{"control_id":"A.4.4","coverage":"full","framework":"iso-42001","relationship":"superset_of"},{"control_id":"A.4.5","coverage":"full","framework":"iso-42001","relationship":"superset_of"}],"statement":"Maintain a documented inventory of the resources each AI system depends on, covering data resources, tooling such as frameworks, libraries, and models, and system and computing resources, together with their owners and locations. Record sufficient detail for each resource to support impact assessment, reproducibility, and supplier accountability. Keep the inventory current through the change process and review it periodically.","title":"Document AI system resources and dependencies","unified_id":"UC-AI-03"},"id":"uc:UC-AI-03","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-AI-03","sourceIds":["iso-42001"],"sourceUrl":null,"title":"UC-AI-03 — Document AI system resources and dependencies","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:05929d894eeaf71dcdc9fe8430c4d6f8ad348569feeeca15fda8a539519da7f7","properties":{"control_id":"A.4.3","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-03-cba029bc.json","sourceId":"uc:UC-AI-03","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-4-3-d786b798.json","targetId":"ctrl:iso-42001:A.4.3","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0a3811cb905e53ce713f632daa5fd45b0be2db5c1f8851381a7a48c51c19faba","properties":{},"sourceDetailPath":"/data/v1/records/wf-d59-b3ddf606.json","sourceId":"wf:D59","targetDetailPath":"/data/v1/records/uc-uc-ai-03-cba029bc.json","targetId":"uc:UC-AI-03","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0c73bc707b17a8cfb89bcd060e63c2d3898a8ee5f72391b8cb06efe4ce64734a","properties":{"control_id":"A.4.2","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-03-cba029bc.json","sourceId":"uc:UC-AI-03","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-4-2-83440407.json","targetId":"ctrl:iso-42001:A.4.2","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:1847bfc7440b0548b780fa0df6f706138dd52ad1b17160e239b3979fbdaba0c0","properties":{"rationale":"Inventorying computing/system resources gives the footprint visibility needed to measure and manage AI energy/compute consumption.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-03-cba029bc.json","sourceId":"uc:UC-AI-03","targetDetailPath":"/data/v1/records/risk-ai-environmental-footprint-c86cf6c9.json","targetId":"risk:ai-environmental-footprint","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:19072da7d290c1ae8336503ea461ffd7c87b0f5c39653f1ef42187b9ee29c4fc","properties":{"rationale":"Recording resource owners/locations supports supplier accountability and impact tracing.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-03-cba029bc.json","sourceId":"uc:UC-AI-03","targetDetailPath":"/data/v1/records/risk-ai-accountability-liability-193b3f72.json","targetId":"risk:ai-accountability-liability","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:19d6bbebafa004d61ac1ef893e6cfc9d93676c4aa56124e703c017902a8f51ea","properties":{},"sourceDetailPath":"/data/v1/records/wf-g31-74d18d48.json","sourceId":"wf:G31","targetDetailPath":"/data/v1/records/uc-uc-ai-03-cba029bc.json","targetId":"uc:UC-AI-03","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7916d7c9f2c4e8859260a0dc210bf919e0e2f5540dc471e70d0c52e60a4a03f9","properties":{"rationale":"A current inventory of model/library/dataset dependencies with owners and provenance is the AI-BOM visibility control enabling detection of compromised or over-concentrated third-party providers.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-03-cba029bc.json","sourceId":"uc:UC-AI-03","targetDetailPath":"/data/v1/records/risk-ai-supply-chain-concentration-9f791f54.json","targetId":"risk:ai-supply-chain-concentration","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:801e44e7751fb5023955ed13c93a161fbbe4300262aa4ce10f467b1025430b18","properties":{},"sourceDetailPath":"/data/v1/records/wf-g1-14bc355c.json","sourceId":"wf:G1","targetDetailPath":"/data/v1/records/uc-uc-ai-03-cba029bc.json","targetId":"uc:UC-AI-03","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c62a4b581d28cec25438651c27758ea514a060b3620213f1339713ab3c8aa744","properties":{"control_id":"A.4.4","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-03-cba029bc.json","sourceId":"uc:UC-AI-03","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-4-4-d5789378.json","targetId":"ctrl:iso-42001:A.4.4","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e10126ba919b61027217ffcba10522ae77b2ae368e2c54df6fcf15a5d4e162e2","properties":{"control_id":"A.4.5","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-03-cba029bc.json","sourceId":"uc:UC-AI-03","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-4-5-80e0e06c.json","targetId":"ctrl:iso-42001:A.4.5","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:fb27e92cc48c3ba06e6f4ead0e829d1f946e8142ac3dd48359acf23820b72f2d","properties":{"rationale":"Documented dependencies and interfaces reduce the interface mismatches and configuration errors introduced when integrating with other systems.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-03-cba029bc.json","sourceId":"uc:UC-AI-03","targetDetailPath":"/data/v1/records/risk-ai-emergent-integration-risk-8490271c.json","targetId":"risk:ai-emergent-integration-risk","type":"mitigates"}],"schemaVersion":1}