{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"technical","domain":"AI Governance","type":"preventive"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-AI-09","description":"Govern training, validation, and test data under documented data-management practices covering acquisition, selection, provenance recording, and preparation activities such as labelling, cleaning, and enrichment. Apply and record quality criteria appropriate to the intended purpose, including relevance, representativeness, and, to the best extent possible, completeness and freedom from errors, and examine datasets for biases with mitigation of those likely to affect health, safety, or fundamental rights. Retain data documentation and provenance records for each AI system.","details":{"control_category":"technical","control_type":"preventive","domain":"AI Governance","guidance":[{"propositionId":"NIST-AGI-07","propositionTitle":"Prompt provenance and data-flow tracking","source":"nist-ai-agent-identity","sourcePages":"Concept paper p. 6: Tracking Data Flows of an AI System","sourceTitle":"NIST NCCoE: Software and AI Agent Identity and Authorization"}],"members":[{"control_id":"A.7.2","coverage":"full","framework":"iso-42001","relationship":"superset_of"},{"control_id":"A.7.4","coverage":"full","framework":"iso-42001","relationship":"superset_of"},{"control_id":"A.7.5","coverage":"full","framework":"iso-42001","relationship":"superset_of"},{"control_id":"A.7.6","coverage":"full","framework":"iso-42001","relationship":"superset_of"},{"control_id":"AIA-Art10","coverage":"full","framework":"eu-ai-act","relationship":"superset_of"},{"control_id":"A.7.3","coverage":"full","framework":"iso-42001","relationship":"superset_of"}],"statement":"Govern training, validation, and test data under documented data-management practices covering acquisition, selection, provenance recording, and preparation activities such as labelling, cleaning, and enrichment. Apply and record quality criteria appropriate to the intended purpose, including relevance, representativeness, and, to the best extent possible, completeness and freedom from errors, and examine datasets for biases with mitigation of those likely to affect health, safety, or fundamental rights. Retain data documentation and provenance records for each AI system.","title":"Govern AI data quality, provenance, and preparation","unified_id":"UC-AI-09"},"id":"uc:UC-AI-09","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-AI-09","sourceIds":["eu-ai-act","iso-42001","nist-ai-agent-identity"],"sourceUrl":null,"title":"UC-AI-09 — Govern AI data quality, provenance, and preparation","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:104fe727db3b952bc8a1c7c84719f6b85de424d1d140707495491741ac1449ef","properties":{"rationale":"Quality criteria (representativeness, completeness, error-freedom) plus cleaning/labelling governance directly prevents small, unrepresentative or mislabeled training data.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-09-d6934cb6.json","sourceId":"uc:UC-AI-09","targetDetailPath":"/data/v1/records/risk-ai-poor-training-data-quality-95872765.json","targetId":"risk:ai-poor-training-data-quality","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:1061cf8c5c123a904d3c84b27c9274fac6b849670bdbad164cecffc959710362","properties":{"rationale":"Governing lawful data acquisition and provenance addresses training on data without consent or legal basis.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-09-d6934cb6.json","sourceId":"uc:UC-AI-09","targetDetailPath":"/data/v1/records/risk-ai-privacy-leakage-9aa8d83c.json","targetId":"risk:ai-privacy-leakage","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:169998eae416f6a8307276f0a52c552de07fe74a4540bdc6b574c6ca18dd190c","properties":{"control_id":"A.7.4","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-09-d6934cb6.json","sourceId":"uc:UC-AI-09","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-7-4-bbfc048a.json","targetId":"ctrl:iso-42001:A.7.4","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:268ce184229227f812651c6e43f74f22fbae06dd4a556046f1ea8b8ca0e191c9","properties":{"rationale":"Examining datasets for biases and mitigating those affecting rights is the data-source control against discriminatory model behavior.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-09-d6934cb6.json","sourceId":"uc:UC-AI-09","targetDetailPath":"/data/v1/records/risk-ai-bias-discrimination-35faf209.json","targetId":"risk:ai-bias-discrimination","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:37e3cf92f1b25499941000667c17a23849bc39704b8b1e7e08a8573c0fd86198","properties":{"control_id":"A.7.6","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-09-d6934cb6.json","sourceId":"uc:UC-AI-09","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-7-6-49d0eb8c.json","targetId":"ctrl:iso-42001:A.7.6","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:40eec372d123bb2827843cc44fd0646b679198084391e88597f126225061ae4b","properties":{"control_id":"A.7.3","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-09-d6934cb6.json","sourceId":"uc:UC-AI-09","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-7-3-a48a0852.json","targetId":"ctrl:iso-42001:A.7.3","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:50ff106299cd53f11f9aa4f7f5d09f3a153c2abc04d5dba5551104049a683cb0","properties":{"control_id":"A.7.5","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-09-d6934cb6.json","sourceId":"uc:UC-AI-09","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-7-5-ec3c2a85.json","targetId":"ctrl:iso-42001:A.7.5","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:557dcc6e47909eda2548a51127f406d05ce4754c2c644bd8370cc6b5b906285f","properties":{"control_id":"AIA-Art10","coverage":"full","delta":null,"framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-09-d6934cb6.json","sourceId":"uc:UC-AI-09","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art10-76043f54.json","targetId":"ctrl:eu-ai-act:AIA-Art10","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:5c61d202883422137d9bab68522c9feb91de98f1c1d08481d0eafd4e0a3ddabd","properties":{},"sourceDetailPath":"/data/v1/records/wf-d59-b3ddf606.json","sourceId":"wf:D59","targetDetailPath":"/data/v1/records/uc-uc-ai-09-d6934cb6.json","targetId":"uc:UC-AI-09","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:60cf75864da4a99febf5517726e848e63ba0c5fe34302f3103e02639fe4fe43b","properties":{"rationale":"Higher-quality, representative training data reduces garbage-in errors upstream of output accuracy.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-09-d6934cb6.json","sourceId":"uc:UC-AI-09","targetDetailPath":"/data/v1/records/risk-ai-inaccurate-unreliable-output-cf10c86e.json","targetId":"risk:ai-inaccurate-unreliable-output","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:68d8faad99e45a9a74e1bffc348615ff335e104fab0cc55ddd91f4b3a2208702","properties":{"control_id":"A.7.2","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-09-d6934cb6.json","sourceId":"uc:UC-AI-09","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-7-2-29a30b42.json","targetId":"ctrl:iso-42001:A.7.2","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7de1a69b562572f7c55b27787db97bb6a0fd185e1b043167c4f6a561b677ff0a","properties":{"rationale":"Data preparation/quality and bias examination address the training-data bias central to education-AI fairness requirements.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-09-d6934cb6.json","sourceId":"uc:UC-AI-09","targetDetailPath":"/data/v1/records/risk-ai-highrisk-education-fe20b899.json","targetId":"risk:ai-highrisk-education","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:8b9d489f24b6cf9a77a0d60a226a11f1468c74b1a0e130e62e9ce4dee9239361","properties":{"rationale":"Provenance recording and data-selection governance reduce training-data poisoning and embedded backdoors.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-09-d6934cb6.json","sourceId":"uc:UC-AI-09","targetDetailPath":"/data/v1/records/risk-ai-adversarial-poisoning-attacks-ea7df068.json","targetId":"risk:ai-adversarial-poisoning-attacks","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b7c909701505cf62775a870948e7cbbccda74a4b525cd01a852c7f452f46ef91","properties":{},"sourceDetailPath":"/data/v1/records/wf-r13-431c488e.json","sourceId":"wf:R13","targetDetailPath":"/data/v1/records/uc-uc-ai-09-d6934cb6.json","targetId":"uc:UC-AI-09","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c739a630c876afd61b38a7853c82a906def917e7c8bd073289f6daa4dc281453","properties":{},"sourceDetailPath":"/data/v1/records/wf-g1-14bc355c.json","sourceId":"wf:G1","targetDetailPath":"/data/v1/records/uc-uc-ai-09-d6934cb6.json","targetId":"uc:UC-AI-09","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c796df96304eabe4594e014cf3b2d4371f28c2511b52bcb9507c7d4563883d1c","properties":{"rationale":"Provenance/lineage records supply the datasheets the risk says are missing, though indirect to core model opacity.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-09-d6934cb6.json","sourceId":"uc:UC-AI-09","targetDetailPath":"/data/v1/records/risk-ai-lack-explainability-transparency-edbd29e2.json","targetId":"risk:ai-lack-explainability-transparency","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e974026731094ce848362f5e0fe751e3756341c42b45f54623f381dbab781129","properties":{"rationale":"Data accuracy/relevance criteria reduce processing of inaccurate or out-of-context data (distortion harm).","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-09-d6934cb6.json","sourceId":"uc:UC-AI-09","targetDetailPath":"/data/v1/records/risk-data-privacy-harms-to-individuals-510e65af.json","targetId":"risk:data-privacy-harms-to-individuals","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:fea2bfbfc69dbb6e6a399b6c25025014c9c5855f2e816a57343d5baa900c1ef1","properties":{"control_id":"NIST-AGI-07","coverage":"guidance","delta":null,"framework":"nist-ai-agent-identity","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"informs","sourcePages":"Concept paper p. 6: Tracking Data Flows of an AI System","source_version":"February 2026 draft concept paper"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-09-d6934cb6.json","sourceId":"uc:UC-AI-09","targetDetailPath":"/data/v1/records/ctrl-nist-ai-agent-identity-nist-agi-07-e4ca7bdd.json","targetId":"ctrl:nist-ai-agent-identity:NIST-AGI-07","type":"informed_by"}],"schemaVersion":1}