{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-AUDIT-03","description":"The board oversees the internal audit function through regular interaction with the chief audit executive, including executive sessions without management present, and approves the CAE's appointment, remuneration, evaluation, and removal. The board reviews and approves the internal audit plan and budget and ensures the function has sufficient resources to fulfill its mandate. Board meeting minutes and approvals evidence oversight.","details":{"control_category":"administrative","control_type":"preventive","domain":"Compliance, Audit & Assurance","guidance":[],"members":[{"control_id":"Principle 8","coverage":"partial","delta":"Principle 8 also includes board oversight of quality and external quality assessment (8.3-8.4)","framework":"iia-2024","relationship":"intersects_with"},{"control_id":"Std 8.1","coverage":"full","framework":"iia-2024","relationship":"superset_of"},{"control_id":"Std 8.2","coverage":"full","framework":"iia-2024","relationship":"superset_of"}],"statement":"The board oversees the internal audit function through regular interaction with the chief audit executive, including executive sessions without management present, and approves the CAE's appointment, remuneration, evaluation, and removal. The board reviews and approves the internal audit plan and budget and ensures the function has sufficient resources to fulfill its mandate. Board meeting minutes and approvals evidence oversight.","title":"Ensure board oversight and support of internal audit","unified_id":"UC-AUDIT-03"},"id":"uc:UC-AUDIT-03","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-AUDIT-03","sourceIds":["iia-2024"],"sourceUrl":null,"title":"UC-AUDIT-03 — Ensure board oversight and support of internal audit","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0a9695d1574f11daa008e202b7b942b00c3b9fe9ff9d10eac6ac9f84e15d421e","properties":{},"sourceDetailPath":"/data/v1/records/wf-a8-414556d8.json","sourceId":"wf:A8","targetDetailPath":"/data/v1/records/uc-uc-audit-03-927ae903.json","targetId":"uc:UC-AUDIT-03","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:567ac53a09b3d61c3e4c298d3d34b79b550ea4cfa02e32c845375c30744f2be7","properties":{"control_id":"Std 8.1","coverage":"full","delta":null,"framework":"iia-2024","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2024 edition"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-03-927ae903.json","sourceId":"uc:UC-AUDIT-03","targetDetailPath":"/data/v1/records/ctrl-iia-2024-std-8-1-fcaabb3b.json","targetId":"ctrl:iia-2024:Std 8.1","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:67bdf312020811ff2d46960a5b3b3c188b5f8f36a828ec87b245ba89eca766b2","properties":{"rationale":"","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-03-927ae903.json","sourceId":"uc:UC-AUDIT-03","targetDetailPath":"/data/v1/records/risk-ai-highrisk-employment-f50a88ef.json","targetId":"risk:ai-highrisk-employment","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:8611a5306bb73746d58e0da84faa0355ff47c68a535062018d0da7f0a4f8a487","properties":{"control_id":"Std 8.2","coverage":"full","delta":null,"framework":"iia-2024","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2024 edition"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-03-927ae903.json","sourceId":"uc:UC-AUDIT-03","targetDetailPath":"/data/v1/records/ctrl-iia-2024-std-8-2-6259e7c5.json","targetId":"ctrl:iia-2024:Std 8.2","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b1e16ff37b7788cddcaff117e565a57281b7e8ea1bae9adff66e1f8f87628b49","properties":{"rationale":"Board oversight of the CAE, plan, and budget through executive sessions is core machinery strengthening board oversight of risk and control.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-03-927ae903.json","sourceId":"uc:UC-AUDIT-03","targetDetailPath":"/data/v1/records/risk-gov-oversight-failure-d98ffc12.json","targetId":"risk:gov-oversight-failure","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d41deec24c685cbda881c9770ed62bf9494efe78ca383f5ef0fede142134b14b","properties":{},"sourceDetailPath":"/data/v1/records/wf-a5-cb7fa618.json","sourceId":"wf:A5","targetDetailPath":"/data/v1/records/uc-uc-audit-03-927ae903.json","targetId":"uc:UC-AUDIT-03","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f18fda066acd49414a3ede545b79d3b75b88f80e0259d8198d31f59658b8c3c1","properties":{"control_id":"Principle 8","coverage":"partial","delta":"Principle 8 also includes board oversight of quality and external quality assessment (8.3-8.4)","framework":"iia-2024","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2024 edition"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-03-927ae903.json","sourceId":"uc:UC-AUDIT-03","targetDetailPath":"/data/v1/records/ctrl-iia-2024-principle-8-f2747c36.json","targetId":"ctrl:iia-2024:Principle 8","type":"maps_to"}],"schemaVersion":1}