{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-AUDIT-25","description":"The organization obtains or generates and uses relevant, quality information to support the functioning of internal control, with defined expectations for accuracy, completeness, and timeliness. Records are protected against loss, destruction, falsification, and unauthorized access or release, and are retained and disposed of in accordance with retention schedules aligned to legal, regulatory, contractual, and business requirements.","details":{"control_category":"administrative","control_type":"preventive","domain":"Compliance, Audit & Assurance","guidance":[],"members":[{"control_id":"CC2.1","coverage":"full","framework":"soc2","relationship":"superset_of"},{"control_id":"A.5.33","coverage":"full","framework":"iso-27001","relationship":"superset_of"}],"statement":"The organization obtains or generates and uses relevant, quality information to support the functioning of internal control, with defined expectations for accuracy, completeness, and timeliness. Records are protected against loss, destruction, falsification, and unauthorized access or release, and are retained and disposed of in accordance with retention schedules aligned to legal, regulatory, contractual, and business requirements.","title":"Maintain quality records and information for internal control","unified_id":"UC-AUDIT-25"},"id":"uc:UC-AUDIT-25","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-AUDIT-25","sourceIds":["iso-27001","soc2"],"sourceUrl":null,"title":"UC-AUDIT-25 — Maintain quality records and information for internal control","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:07fe4f0e45c00953b5da874a9a9a10a8e14af26aa361c7de085de4114b1e0a4e","properties":{},"sourceDetailPath":"/data/v1/records/wf-g8-a2141444.json","sourceId":"wf:G8","targetDetailPath":"/data/v1/records/uc-uc-audit-25-e23c8618.json","targetId":"uc:UC-AUDIT-25","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:231e076c3fbc2c2dac046b5b4281a491b67ce791ecd14df43be8a83bdf80ae78","properties":{},"sourceDetailPath":"/data/v1/records/wf-s9-feb4a0f4.json","sourceId":"wf:S9","targetDetailPath":"/data/v1/records/uc-uc-audit-25-e23c8618.json","targetId":"uc:UC-AUDIT-25","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3041c237576a80539c8e6a1d5d685d3a5fcf03ece53aabe7377d12a8faaac8db","properties":{"control_id":"CC2.1","coverage":"full","delta":null,"framework":"soc2","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2017 TSC"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-25-e23c8618.json","sourceId":"uc:UC-AUDIT-25","targetDetailPath":"/data/v1/records/ctrl-soc2-cc2-1-83b34ada.json","targetId":"ctrl:soc2:CC2.1","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3296f64e1c1d92d1d2b1cc7d26166c9fbf559beacc66236a19449ebc58df8b8a","properties":{},"sourceDetailPath":"/data/v1/records/wf-r1-a5f4fc75.json","sourceId":"wf:R1","targetDetailPath":"/data/v1/records/uc-uc-audit-25-e23c8618.json","targetId":"uc:UC-AUDIT-25","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:5d9022210eb0f1f38c529327fff2dc3ee8a9fb1c39dd14c9269217c7dbac7ca5","properties":{},"sourceDetailPath":"/data/v1/records/wf-d58-e187aaba.json","sourceId":"wf:D58","targetDetailPath":"/data/v1/records/uc-uc-audit-25-e23c8618.json","targetId":"uc:UC-AUDIT-25","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7b668b3e28f5ddd63bcc1b906b58c137b3a35d5066701a4b1a6a36bae28b9a8c","properties":{"rationale":"Protecting records against falsification and unauthorized alteration makes fraudulent transactions harder to record and conceal.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-25-e23c8618.json","sourceId":"uc:UC-AUDIT-25","targetDetailPath":"/data/v1/records/risk-fin-financial-statement-fraud-1dd35d5a.json","targetId":"risk:fin-financial-statement-fraud","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7d0d09710154ed4f5da4e3e1469f1da59724795dd902f32fb4c810b59af8449d","properties":{"control_id":"A.5.33","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-25-e23c8618.json","sourceId":"uc:UC-AUDIT-25","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-33-2f7017d2.json","targetId":"ctrl:iso-27001:A.5.33","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:838c040a667b3f021436ffdb8fe209c66e6455b9316ef6f9238496706b713c56","properties":{},"sourceDetailPath":"/data/v1/records/wf-c17-334c380f.json","sourceId":"wf:C17","targetDetailPath":"/data/v1/records/uc-uc-audit-25-e23c8618.json","targetId":"uc:UC-AUDIT-25","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a668d670f1a0c3a43bae2c02edb791a5f8cdbd0ef90caac180878aaefdedf8c0","properties":{},"sourceDetailPath":"/data/v1/records/wf-d05-2302db1f.json","sourceId":"wf:D05","targetDetailPath":"/data/v1/records/uc-uc-audit-25-e23c8618.json","targetId":"uc:UC-AUDIT-25","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:aa06f45cc04e8657e99ec7ec38bd257206833472fd0984721ba3b07562dd4016","properties":{},"sourceDetailPath":"/data/v1/records/wf-d54-eba5e14e.json","sourceId":"wf:D54","targetDetailPath":"/data/v1/records/uc-uc-audit-25-e23c8618.json","targetId":"uc:UC-AUDIT-25","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b3f539f7189b49d7f0a0f45e6abfa01299bbf5b1ceaf63c89181a98ac6e4629a","properties":{},"sourceDetailPath":"/data/v1/records/wf-d06-c9616fb8.json","sourceId":"wf:D06","targetDetailPath":"/data/v1/records/uc-uc-audit-25-e23c8618.json","targetId":"uc:UC-AUDIT-25","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c9906d7cd0527cdb1d885b718e3a79bef4f116c71ea23580913cbeb940c5ed86","properties":{},"sourceDetailPath":"/data/v1/records/wf-a15-e859f6b8.json","sourceId":"wf:A15","targetDetailPath":"/data/v1/records/uc-uc-audit-25-e23c8618.json","targetId":"uc:UC-AUDIT-25","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ce316475187c07d617d536c40268737f64d0a516a08ef8acbb3ee232e6363709","properties":{},"sourceDetailPath":"/data/v1/records/wf-g34-1b925ad7.json","sourceId":"wf:G34","targetDetailPath":"/data/v1/records/uc-uc-audit-25-e23c8618.json","targetId":"uc:UC-AUDIT-25","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:dbb71b2b62f894967b4ebd26617f416195b90a5837b511cf41d4efee0e71a7ad","properties":{"rationale":"Retaining and disposing of records per schedules aligned to legal/regulatory/contractual requirements (ISO A.5.33) prevents unlawful retention and premature deletion.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-25-e23c8618.json","sourceId":"uc:UC-AUDIT-25","targetDetailPath":"/data/v1/records/risk-data-retention-noncompliance-ec7b8dbc.json","targetId":"risk:data-retention-noncompliance","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:eca35ad42222f46a40d1a1fd7162e52746b51d83e13675260b3cc68b33aadaf2","properties":{},"sourceDetailPath":"/data/v1/records/wf-d57-31008e44.json","sourceId":"wf:D57","targetDetailPath":"/data/v1/records/uc-uc-audit-25-e23c8618.json","targetId":"uc:UC-AUDIT-25","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f6357e84407972425a77ced74650fa4cf04fc4cb758835afeb85e55242d3908b","properties":{"rationale":"Requiring relevant, quality information with defined accuracy, completeness, and timeliness expectations (CC2.1) reduces reports resting on inaccurate data.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-25-e23c8618.json","sourceId":"uc:UC-AUDIT-25","targetDetailPath":"/data/v1/records/risk-fin-data-quality-reporting-integrity-276baaa6.json","targetId":"risk:fin-data-quality-reporting-integrity","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f99541e94e0111077ffd43956b0f99ac90f951f10100cc1682d39e016a370995","properties":{},"sourceDetailPath":"/data/v1/records/wf-s22-2af6c127.json","sourceId":"wf:S22","targetDetailPath":"/data/v1/records/uc-uc-audit-25-e23c8618.json","targetId":"uc:UC-AUDIT-25","type":"operates"}],"schemaVersion":1}