{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-AUDIT-12","description":"Each internal audit engagement is planned effectively: auditors perform an engagement-level risk assessment of the activity under review, define engagement objectives and scope that address the assessed risks, and establish evaluation criteria against which the subject matter will be assessed. Planning decisions and their rationale are documented in the engagement file and approved by engagement supervision.","details":{"control_category":"administrative","control_type":"preventive","domain":"Compliance, Audit & Assurance","guidance":[],"members":[{"control_id":"Principle 13","coverage":"partial","delta":"Principle 13 also requires engagement communication, resources, and approved work program (13.1/13.5/13.6)","framework":"iia-2024","relationship":"intersects_with"},{"control_id":"Std 13.2","coverage":"full","framework":"iia-2024","relationship":"superset_of"},{"control_id":"Std 13.3","coverage":"full","framework":"iia-2024","relationship":"superset_of"},{"control_id":"Std 13.4","coverage":"full","framework":"iia-2024","relationship":"superset_of"}],"statement":"Each internal audit engagement is planned effectively: auditors perform an engagement-level risk assessment of the activity under review, define engagement objectives and scope that address the assessed risks, and establish evaluation criteria against which the subject matter will be assessed. Planning decisions and their rationale are documented in the engagement file and approved by engagement supervision.","title":"Plan engagements with risk-based objectives, scope, and criteria","unified_id":"UC-AUDIT-12"},"id":"uc:UC-AUDIT-12","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-AUDIT-12","sourceIds":["iia-2024"],"sourceUrl":null,"title":"UC-AUDIT-12 — Plan engagements with risk-based objectives, scope, and criteria","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0fe27f78df6d724a5231ee84bfeefaf05f36cb5af8767c409934d411fc30180f","properties":{},"sourceDetailPath":"/data/v1/records/wf-s18-d65b0a49.json","sourceId":"wf:S18","targetDetailPath":"/data/v1/records/uc-uc-audit-12-657c1271.json","targetId":"uc:UC-AUDIT-12","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:150d60793c1c7f4da4d39f91f5414da5bf3bbade0d61c5aee35e5d8cf96cb8d4","properties":{"control_id":"Std 13.2","coverage":"full","delta":null,"framework":"iia-2024","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2024 edition"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-12-657c1271.json","sourceId":"uc:UC-AUDIT-12","targetDetailPath":"/data/v1/records/ctrl-iia-2024-std-13-2-70475afa.json","targetId":"ctrl:iia-2024:Std 13.2","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:16796760416ebd2d708303fc10f11d61411022ce94c70620b1f26f4fc47340fb","properties":{"control_id":"Principle 13","coverage":"partial","delta":"Principle 13 also requires engagement communication, resources, and approved work program (13.1/13.5/13.6)","framework":"iia-2024","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2024 edition"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-12-657c1271.json","sourceId":"uc:UC-AUDIT-12","targetDetailPath":"/data/v1/records/ctrl-iia-2024-principle-13-d77b639d.json","targetId":"ctrl:iia-2024:Principle 13","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:22f6172a9b1a4f0d4e6aae13fe96336b39946c177589532cbbef977dfcadf8e3","properties":{},"sourceDetailPath":"/data/v1/records/wf-s27-998f73c8.json","sourceId":"wf:S27","targetDetailPath":"/data/v1/records/uc-uc-audit-12-657c1271.json","targetId":"uc:UC-AUDIT-12","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:35c0fd1746c5a0587993fb21921be5afb4602fd20e244ca9c85406d0a868b4be","properties":{"control_id":"Std 13.4","coverage":"full","delta":null,"framework":"iia-2024","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2024 edition"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-12-657c1271.json","sourceId":"uc:UC-AUDIT-12","targetDetailPath":"/data/v1/records/ctrl-iia-2024-std-13-4-8f7549c4.json","targetId":"ctrl:iia-2024:Std 13.4","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4b9416bde6094309018bcff72343c65239b79d4ad261f784d5fa4b1b0ce3f60f","properties":{},"sourceDetailPath":"/data/v1/records/wf-a17-a4afb609.json","sourceId":"wf:A17","targetDetailPath":"/data/v1/records/uc-uc-audit-12-657c1271.json","targetId":"uc:UC-AUDIT-12","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4ef000b5d6a8482814562a590fa5ed214d920bd70d63756b4861bd5d5ed2173d","properties":{},"sourceDetailPath":"/data/v1/records/wf-a3-05f42868.json","sourceId":"wf:A3","targetDetailPath":"/data/v1/records/uc-uc-audit-12-657c1271.json","targetId":"uc:UC-AUDIT-12","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:6c6a069b16d13aa148c0297c5069d6a222c24d6e04fe83dee46ad3d2569beab3","properties":{"rationale":"","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-12-657c1271.json","sourceId":"uc:UC-AUDIT-12","targetDetailPath":"/data/v1/records/risk-esg-greenwashing-disclosure-be236248.json","targetId":"risk:esg-greenwashing-disclosure","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:6dc517387a11bccda97a12f25e46863a4621a1e7f9f84ab22a10ed80249b823e","properties":{"rationale":"Engagement-level risk assessment, objectives, scope, and criteria are core planning steps of a conformant independent audit.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-12-657c1271.json","sourceId":"uc:UC-AUDIT-12","targetDetailPath":"/data/v1/records/risk-compliance-no-independent-audit-9e1acf0f.json","targetId":"risk:compliance-no-independent-audit","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:9b06aec14f3cb7b175a37f7c4aa87205e27b8238cf0ba2f24bd98605771558ba","properties":{},"sourceDetailPath":"/data/v1/records/wf-a7-454c1d0e.json","sourceId":"wf:A7","targetDetailPath":"/data/v1/records/uc-uc-audit-12-657c1271.json","targetId":"uc:UC-AUDIT-12","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:9c09951e14c9151517fec40b0de4bb67bb3ca11265531cc67c8c3d787b900d8a","properties":{"control_id":"Std 13.3","coverage":"full","delta":null,"framework":"iia-2024","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2024 edition"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-12-657c1271.json","sourceId":"uc:UC-AUDIT-12","targetDetailPath":"/data/v1/records/ctrl-iia-2024-std-13-3-2ec7f138.json","targetId":"ctrl:iia-2024:Std 13.3","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d5f3a802faa65ddf01a584ae86132626cadfc53d8a42697c0ce70f2bdaf75880","properties":{},"sourceDetailPath":"/data/v1/records/wf-a1-f09c8201.json","sourceId":"wf:A1","targetDetailPath":"/data/v1/records/uc-uc-audit-12-657c1271.json","targetId":"uc:UC-AUDIT-12","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:db11a0ec5af7d1a849eb48d8670814e88a5bc0638d638ab4db64c72d46af3fc8","properties":{},"sourceDetailPath":"/data/v1/records/wf-a11-0924c009.json","sourceId":"wf:A11","targetDetailPath":"/data/v1/records/uc-uc-audit-12-657c1271.json","targetId":"uc:UC-AUDIT-12","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f557616e2c3738e78b5abc171359fe5360d32bc6c789acc6bd159a95891127f9","properties":{},"sourceDetailPath":"/data/v1/records/wf-d10-392b8e6b.json","sourceId":"wf:D10","targetDetailPath":"/data/v1/records/uc-uc-audit-12-657c1271.json","targetId":"uc:UC-AUDIT-12","type":"tests"}],"schemaVersion":1}