{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-AI-13","description":"For each AI system, determine and document the organization's role in the value chain, such as provider or deployer, and allocate life-cycle responsibilities among the organization, partners, suppliers, and customers. Maintain a register of the obligations attached to each role, including provider duties for high-risk systems (quality management, conformity assessment, CE marking, registration) and deployer duties (instruction-compliant operation, oversight assignment, log retention), tracking each obligation to an owner and evidence. Review the register when systems or regulations change.","details":{"control_category":"administrative","control_type":"preventive","domain":"AI Governance","guidance":[],"members":[{"control_id":"A.10.2","coverage":"full","framework":"iso-42001","relationship":"superset_of"},{"control_id":"AIA-Art16","coverage":"partial","delta":"substantive QMS, conformity-assessment, CE-marking, and EU-database-registration duties are not yet covered by a dedicated unified control - an acknowledged coverage gap in the AI Governance domain","framework":"eu-ai-act","relationship":"intersects_with"},{"control_id":"AIA-Art26","coverage":"partial","delta":"operational oversight, monitoring, and log-retention duties evidenced via dedicated controls","framework":"eu-ai-act","relationship":"intersects_with"},{"control_id":"E012","coverage":"partial","delta":"semiannual documentation of the AI system's regulatory compliance posture and obligations register shared with customers","framework":"aiuc-1","relationship":"intersects_with"},{"control_id":"AIA-Art21-22","coverage":"partial","delta":"cooperation with competent authorities on request and appointment of an authorised representative for providers established outside the jurisdiction","framework":"eu-ai-act","relationship":"intersects_with"},{"control_id":"AIA-Art23-25","coverage":"partial","delta":"importer and distributor verification duties and the conditions under which a distributor, importer, or deployer becomes a provider","framework":"eu-ai-act","relationship":"intersects_with"},{"control_id":"AIA-Art43","coverage":"partial","delta":"execution of the applicable conformity assessment procedure (internal control or notified body) before placing the system on the market","framework":"eu-ai-act","relationship":"intersects_with"},{"control_id":"AIA-Art47-49","coverage":"partial","delta":"drawing up the declaration of conformity, affixing the marking, and registering the system in the public database before placing on the market","framework":"eu-ai-act","relationship":"intersects_with"}],"statement":"For each AI system, determine and document the organization's role in the value chain, such as provider or deployer, and allocate life-cycle responsibilities among the organization, partners, suppliers, and customers. Maintain a register of the obligations attached to each role, including provider duties for high-risk systems (quality management, conformity assessment, CE marking, registration) and deployer duties (instruction-compliant operation, oversight assignment, log retention), tracking each obligation to an owner and evidence. Review the register when systems or regulations change.","title":"Assign AI value-chain roles and discharge obligations","unified_id":"UC-AI-13"},"id":"uc:UC-AI-13","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-AI-13","sourceIds":["aiuc-1","eu-ai-act","iso-42001"],"sourceUrl":null,"title":"UC-AI-13 — Assign AI value-chain roles and discharge obligations","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0e01a91c505dc9722946c2e57191c233c7313b629f4f2666e36fdb9e39c37ef8","properties":{"control_id":"AIA-Art16","coverage":"partial","delta":"substantive QMS, conformity-assessment, CE-marking, and EU-database-registration duties are not yet covered by a dedicated unified control - an acknowledged coverage gap in the AI Governance domain","framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-13-2ce71d80.json","sourceId":"uc:UC-AI-13","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art16-63a82efa.json","targetId":"ctrl:eu-ai-act:AIA-Art16","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:1977c8389f347fa025ca5a3c3c4d0516198015e2de786e6000a780af005aa58e","properties":{},"sourceDetailPath":"/data/v1/records/wf-r2-e4fb6250.json","sourceId":"wf:R2","targetDetailPath":"/data/v1/records/uc-uc-ai-13-2ce71d80.json","targetId":"uc:UC-AI-13","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:206e737c385ca53fe82d7ba6df4799fc9a0c3e70df649c5f972de37fdfe26c05","properties":{"control_id":"AIA-Art23-25","coverage":"partial","delta":"importer and distributor verification duties and the conditions under which a distributor, importer, or deployer becomes a provider","framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-13-2ce71d80.json","sourceId":"uc:UC-AI-13","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art23-25-05f2196c.json","targetId":"ctrl:eu-ai-act:AIA-Art23-25","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3ad57d76f49c3f40b3332a0ec7ed6017583163bef39da12bed54a3e46f162269","properties":{},"sourceDetailPath":"/data/v1/records/wf-d59-b3ddf606.json","sourceId":"wf:D59","targetDetailPath":"/data/v1/records/uc-uc-ai-13-2ce71d80.json","targetId":"uc:UC-AI-13","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3c72b18e584a203354850963f832b1486e3dd1fd1d8d8f25bc3788de37bc8493","properties":{"control_id":"AIA-Art47-49","coverage":"partial","delta":"drawing up the declaration of conformity, affixing the marking, and registering the system in the public database before placing on the market","framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-13-2ce71d80.json","sourceId":"uc:UC-AI-13","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art47-49-48da9c43.json","targetId":"ctrl:eu-ai-act:AIA-Art47-49","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:471a0896837a1f88972d37d8fd39f0416f1f5b99c225e8bb2df05e7110265338","properties":{"control_id":"AIA-Art26","coverage":"partial","delta":"operational oversight, monitoring, and log-retention duties evidenced via dedicated controls","framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-13-2ce71d80.json","sourceId":"uc:UC-AI-13","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art26-600eb687.json","targetId":"ctrl:eu-ai-act:AIA-Art26","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a830488120b8123d2a93c38184e2e88547aa4611abd01bd91432b8bd06ee9517","properties":{"control_id":"A.10.2","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-13-2ce71d80.json","sourceId":"uc:UC-AI-13","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-10-2-8a417a99.json","targetId":"ctrl:iso-42001:A.10.2","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ac172b28d4ffcf3709fa2526d8c3233451689e3c7cf1977403a2436f7844d93a","properties":{},"sourceDetailPath":"/data/v1/records/wf-g31-74d18d48.json","sourceId":"wf:G31","targetDetailPath":"/data/v1/records/uc-uc-ai-13-2ce71d80.json","targetId":"uc:UC-AI-13","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:aca06ef120dabb82430a487ed877679a3ae107279b2f22a40b97fa0609e4626e","properties":{"control_id":"AIA-Art43","coverage":"partial","delta":"execution of the applicable conformity assessment procedure (internal control or notified body) before placing the system on the market","framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-13-2ce71d80.json","sourceId":"uc:UC-AI-13","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art43-00b4ae7a.json","targetId":"ctrl:eu-ai-act:AIA-Art43","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:af64a46f0cf0750bdc1e5b4a37cbb3ae602856ab3e1083c4ddb37f615381b498","properties":{"rationale":"The obligation register assigns the deployer oversight-assignment duty to a specific owner.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-13-2ce71d80.json","sourceId":"uc:UC-AI-13","targetDetailPath":"/data/v1/records/risk-ai-insufficient-human-oversight-6c4f3dfa.json","targetId":"risk:ai-insufficient-human-oversight","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c3af86201b362726dcf731b480743ed527971d2ee9164ddbdda693ec766a6961","properties":{"control_id":"E012","coverage":"partial","delta":"semiannual documentation of the AI system's regulatory compliance posture and obligations register shared with customers","framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-13-2ce71d80.json","sourceId":"uc:UC-AI-13","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-e012-78a3be53.json","targetId":"ctrl:aiuc-1:E012","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d1e1c3d34ae1816a1c94e4cbf595b24e2536dc0f9ff2226deebb6cb2eee7e0ee","properties":{"rationale":"Determining value-chain role and allocating responsibilities/obligations to named owners closes the ambiguous cross-party accountability the risk names.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-13-2ce71d80.json","sourceId":"uc:UC-AI-13","targetDetailPath":"/data/v1/records/risk-ai-accountability-liability-193b3f72.json","targetId":"risk:ai-accountability-liability","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d6f15bc8ce6e0050f9c3b0cfe127b25ccb8707150bc05add1d90a6261aeebf3e","properties":{"rationale":"Allocating lifecycle obligations across suppliers/partners clarifies responsibility for third-party AI components.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-13-2ce71d80.json","sourceId":"uc:UC-AI-13","targetDetailPath":"/data/v1/records/risk-ai-supply-chain-concentration-9f791f54.json","targetId":"risk:ai-supply-chain-concentration","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:da75d8c9c435b8098e7b7df946476f108ce707a0769015d95cddc2f60e660ccb","properties":{"control_id":"AIA-Art21-22","coverage":"partial","delta":"cooperation with competent authorities on request and appointment of an authorised representative for providers established outside the jurisdiction","framework":"eu-ai-act","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"Regulation (EU) 2024/1689"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-13-2ce71d80.json","sourceId":"uc:UC-AI-13","targetDetailPath":"/data/v1/records/ctrl-eu-ai-act-aia-art21-22-eb4ae796.json","targetId":"ctrl:eu-ai-act:AIA-Art21-22","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:db5157988bedf902f1354ccece3af23a945ffe7ab23d722291c6a188cfe5b9e4","properties":{},"sourceDetailPath":"/data/v1/records/wf-g35-088a9083.json","sourceId":"wf:G35","targetDetailPath":"/data/v1/records/uc-uc-ai-13-2ce71d80.json","targetId":"uc:UC-AI-13","type":"operates"}],"schemaVersion":1}