{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-AUDIT-13","description":"Auditors gather information that is relevant, reliable, and sufficient to support analyses and evaluations, applying appropriate analytical methods and tools. Deviations between the established criteria and the observed condition are analyzed and assessed for significance and developed into potential findings documenting condition, criteria, cause, and effect. Evidence and analyses are captured in workpapers.","details":{"control_category":"administrative","control_type":"detective","domain":"Compliance, Audit & Assurance","guidance":[],"members":[{"control_id":"Principle 14","coverage":"partial","delta":"Principle 14 also spans evaluation of findings, recommendations and action plans, and engagement conclusions (Std 14.3-14.5 home) and engagement documentation (Std 14.6 home)","framework":"iia-2024","relationship":"intersects_with"},{"control_id":"Std 14.1","coverage":"full","framework":"iia-2024","relationship":"superset_of"},{"control_id":"Std 14.2","coverage":"full","framework":"iia-2024","relationship":"superset_of"}],"statement":"Auditors gather information that is relevant, reliable, and sufficient to support analyses and evaluations, applying appropriate analytical methods and tools. Deviations between the established criteria and the observed condition are analyzed and assessed for significance and developed into potential findings documenting condition, criteria, cause, and effect. Evidence and analyses are captured in workpapers.","title":"Gather and analyze evidence to develop engagement findings","unified_id":"UC-AUDIT-13"},"id":"uc:UC-AUDIT-13","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-AUDIT-13","sourceIds":["iia-2024"],"sourceUrl":null,"title":"UC-AUDIT-13 — Gather and analyze evidence to develop engagement findings","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0361c6197ea12b63a4364d037f9badca6914b45a85c103d131dd48ec0159fda5","properties":{},"sourceDetailPath":"/data/v1/records/wf-a12-a338c67f.json","sourceId":"wf:A12","targetDetailPath":"/data/v1/records/uc-uc-audit-13-3dae730e.json","targetId":"uc:UC-AUDIT-13","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0ac1fd96a26b571af5e0d324d24c9fb4c023f370a3aebe99a7d657c234fc53ba","properties":{},"sourceDetailPath":"/data/v1/records/wf-a17-a4afb609.json","sourceId":"wf:A17","targetDetailPath":"/data/v1/records/uc-uc-audit-13-3dae730e.json","targetId":"uc:UC-AUDIT-13","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:15e7adacfca7199d90659228d617245c6392a24f4bb426560c546c2d3fcbeb55","properties":{},"sourceDetailPath":"/data/v1/records/wf-a19-c8784b53.json","sourceId":"wf:A19","targetDetailPath":"/data/v1/records/uc-uc-audit-13-3dae730e.json","targetId":"uc:UC-AUDIT-13","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:192ed8d4bcdc5010575c85d55b8aa3fbfb15bc3ebbfc6f506e33e14b528173bc","properties":{},"sourceDetailPath":"/data/v1/records/wf-a7-454c1d0e.json","sourceId":"wf:A7","targetDetailPath":"/data/v1/records/uc-uc-audit-13-3dae730e.json","targetId":"uc:UC-AUDIT-13","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:1cf3907ae7300ef2c8a606430de881607ec589faeeb0cb7a302864c7b4b36e0f","properties":{},"sourceDetailPath":"/data/v1/records/wf-d01-41c8c187.json","sourceId":"wf:D01","targetDetailPath":"/data/v1/records/uc-uc-audit-13-3dae730e.json","targetId":"uc:UC-AUDIT-13","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:1f75dccc1ea3922ce9df8af5c24a4394a631b4c5681996407363352f6f0ccc13","properties":{"control_id":"Std 14.2","coverage":"full","delta":null,"framework":"iia-2024","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2024 edition"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-13-3dae730e.json","sourceId":"uc:UC-AUDIT-13","targetDetailPath":"/data/v1/records/ctrl-iia-2024-std-14-2-0d8dc7bc.json","targetId":"ctrl:iia-2024:Std 14.2","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:231bc724359ed16e5ab29a11afef76cc56b56cb09c908d0c86d9580014a696a5","properties":{},"sourceDetailPath":"/data/v1/records/wf-a14-6d117a6b.json","sourceId":"wf:A14","targetDetailPath":"/data/v1/records/uc-uc-audit-13-3dae730e.json","targetId":"uc:UC-AUDIT-13","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:27669d34434baaa4a24a1f1841ff4f82c3177028cdb667744cb1bec29b7d3568","properties":{},"sourceDetailPath":"/data/v1/records/wf-a15-e859f6b8.json","sourceId":"wf:A15","targetDetailPath":"/data/v1/records/uc-uc-audit-13-3dae730e.json","targetId":"uc:UC-AUDIT-13","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:428c026fc872feacfc3bcb33ebce571038422462b6955d4d8233ad4f794392ae","properties":{},"sourceDetailPath":"/data/v1/records/wf-a1-f09c8201.json","sourceId":"wf:A1","targetDetailPath":"/data/v1/records/uc-uc-audit-13-3dae730e.json","targetId":"uc:UC-AUDIT-13","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:5213af95354b5be36ce6f6a2e00969819a401ad3fddb3dcc6bddbcaba0dca8a1","properties":{},"sourceDetailPath":"/data/v1/records/wf-d04-01080a77.json","sourceId":"wf:D04","targetDetailPath":"/data/v1/records/uc-uc-audit-13-3dae730e.json","targetId":"uc:UC-AUDIT-13","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:584148bedbc3531c7a25af893a1b6040dee6c78a2f48659b6ba5e10444c5d9e8","properties":{"control_id":"Std 14.1","coverage":"full","delta":null,"framework":"iia-2024","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2024 edition"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-13-3dae730e.json","sourceId":"uc:UC-AUDIT-13","targetDetailPath":"/data/v1/records/ctrl-iia-2024-std-14-1-88708a53.json","targetId":"ctrl:iia-2024:Std 14.1","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7e4d0db2f3003887ef169db990cc3aad1399ad853299f15f57f40772f45f2535","properties":{"rationale":"Analytical evidence-gathering and deviation analysis can surface fictitious or override transactions for investigation.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-13-3dae730e.json","sourceId":"uc:UC-AUDIT-13","targetDetailPath":"/data/v1/records/risk-fin-financial-statement-fraud-1dd35d5a.json","targetId":"risk:fin-financial-statement-fraud","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a3aa745b503a98dfd127b82ed63c8054f64112c3a57ee3c27aa5f9a1d63a20cd","properties":{},"sourceDetailPath":"/data/v1/records/wf-s8-45ab5a56.json","sourceId":"wf:S8","targetDetailPath":"/data/v1/records/uc-uc-audit-13-3dae730e.json","targetId":"uc:UC-AUDIT-13","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a450fdfb34c6dc134a89105debc121a505cda12d964bdcf3601e12679d413e47","properties":{},"sourceDetailPath":"/data/v1/records/wf-d57-31008e44.json","sourceId":"wf:D57","targetDetailPath":"/data/v1/records/uc-uc-audit-13-3dae730e.json","targetId":"uc:UC-AUDIT-13","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c9e1cfb126ed51a1a283374dea06eefda01f41b0bc625ad83d3523a1d898a24c","properties":{},"sourceDetailPath":"/data/v1/records/wf-s4-719bcf0f.json","sourceId":"wf:S4","targetDetailPath":"/data/v1/records/uc-uc-audit-13-3dae730e.json","targetId":"uc:UC-AUDIT-13","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ea373db62b737ba1a21f9e9f1945de0c8993d9028995e0ebc5d00fe431b2a43c","properties":{},"sourceDetailPath":"/data/v1/records/wf-a11-0924c009.json","sourceId":"wf:A11","targetDetailPath":"/data/v1/records/uc-uc-audit-13-3dae730e.json","targetId":"uc:UC-AUDIT-13","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:eb791a6ff7a33cffceb381a5e54a1ef246a1e60b6c78705393be612606f8a314","properties":{},"sourceDetailPath":"/data/v1/records/wf-a2-163f5a6d.json","sourceId":"wf:A2","targetDetailPath":"/data/v1/records/uc-uc-audit-13-3dae730e.json","targetId":"uc:UC-AUDIT-13","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f1542a50f9e5cd553a0b2a8d3980b06d3b635104cfff72d656321d8373429ebd","properties":{"control_id":"Principle 14","coverage":"partial","delta":"Principle 14 also spans evaluation of findings, recommendations and action plans, and engagement conclusions (Std 14.3-14.5 home) and engagement documentation (Std 14.6 home)","framework":"iia-2024","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2024 edition"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-13-3dae730e.json","sourceId":"uc:UC-AUDIT-13","targetDetailPath":"/data/v1/records/ctrl-iia-2024-principle-14-fd4f55ab.json","targetId":"ctrl:iia-2024:Principle 14","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:fac98a35500bdd9214ec3cfeb1a1d4cd9d4d4843fe85a5759db52a49c69c9855","properties":{"rationale":"","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-13-3dae730e.json","sourceId":"uc:UC-AUDIT-13","targetDetailPath":"/data/v1/records/risk-risk-securities-law-noncompliance-a155942c.json","targetId":"risk:risk-securities-law-noncompliance","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:fe9add4bc9bc370ebef4298c529a85bcbeed9d09c36da89084b5280ae5aaf70c","properties":{},"sourceDetailPath":"/data/v1/records/wf-a13-86aa5cbb.json","sourceId":"wf:A13","targetDetailPath":"/data/v1/records/uc-uc-audit-13-3dae730e.json","targetId":"uc:UC-AUDIT-13","type":"tests"}],"schemaVersion":1}