{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"administrative","domain":"Financial Reporting Controls (SOX)","type":"preventive"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-BCDR-14","description":"Define and operate control activities embedded within key business processes - input, processing, and output controls, segregation of duties and levels of authority, error and exception handling, and traceability of transactions - so that information processed remains complete, accurate, and valid.","details":{"control_category":"administrative","control_type":"preventive","domain":"Financial Reporting Controls (SOX)","guidance":[],"members":[{"control_id":"DSS06","coverage":"full","framework":"cobit-2019","relationship":"equal"}],"statement":"Define and operate control activities embedded within key business processes - input, processing, and output controls, segregation of duties and levels of authority, error and exception handling, and traceability of transactions - so that information processed remains complete, accurate, and valid.","title":"Embed control activities in business processes","unified_id":"UC-BCDR-14"},"id":"uc:UC-BCDR-14","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-BCDR-14","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"UC-BCDR-14 — Embed control activities in business processes","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:130ba892d6dc5c065d80f5c27f19d84cb1adb188792121d04766bc72bb87a4e2","properties":{},"sourceDetailPath":"/data/v1/records/wf-g34-1b925ad7.json","sourceId":"wf:G34","targetDetailPath":"/data/v1/records/uc-uc-bcdr-14-997de451.json","targetId":"uc:UC-BCDR-14","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:20711cfd98cd41367a7fc735aa9c188a91db3618ba093433b9bfec8e1af373ea","properties":{"rationale":"Processing-timeliness controls contribute to recording in the correct period.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-14-997de451.json","sourceId":"uc:UC-BCDR-14","targetDetailPath":"/data/v1/records/risk-fin-cutoff-period-errors-180e8bcf.json","targetId":"risk:fin-cutoff-period-errors","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:2d697ffe43bde3c2e92ca225f0913a1ee4d72f4fb0da4c5d4593f56ecb1a05f9","properties":{"rationale":"Design-level practice ensuring embedded controls exist; the operative completeness controls are reconciliations and interface/three-way-match controls, not this umbrella UC.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-14-997de451.json","sourceId":"uc:UC-BCDR-14","targetDetailPath":"/data/v1/records/risk-fin-completeness-understatement-4b9388d1.json","targetId":"risk:fin-completeness-understatement","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:53071ec641c3ca27b4c2a7a54f6d656e35a5254a5f9ca1ae830b19c44903ef2d","properties":{},"sourceDetailPath":"/data/v1/records/wf-s9-feb4a0f4.json","sourceId":"wf:S9","targetDetailPath":"/data/v1/records/uc-uc-bcdr-14-997de451.json","targetId":"uc:UC-BCDR-14","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:6254a6a89f9d05ebf1f79bdd8d7b07f72fc90aa2ce0775adf854ec0f9bbc4960","properties":{"rationale":"Embedded error/exception handling contributes, but the operative controls catching processing errors are the dedicated input and processing UCs, not this umbrella practice.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-14-997de451.json","sourceId":"uc:UC-BCDR-14","targetDetailPath":"/data/v1/records/risk-ops-process-execution-errors-530a1b11.json","targetId":"risk:ops-process-execution-errors","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7ddfa76602dab3f34a60116919df425458054614ed5674d2b0c12e551c8a76cb","properties":{"rationale":"Umbrella 'manage business-process controls' practice that ensures input/processing controls exist; the operative accuracy controls are the dedicated input and processing UCs, not this design-level wrapper.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-14-997de451.json","sourceId":"uc:UC-BCDR-14","targetDetailPath":"/data/v1/records/risk-fin-accuracy-measurement-errors-fd727255.json","targetId":"risk:fin-accuracy-measurement-errors","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:953e21cca1159048452069dfc6052ae60e2074a70a0485478dc870a4537273c8","properties":{"rationale":"Traceability contributes to integrity, but this is the design-level 'embed controls' practice; operative data-quality controls are IPE validation and interface reconciliation.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-14-997de451.json","sourceId":"uc:UC-BCDR-14","targetDetailPath":"/data/v1/records/risk-fin-data-quality-reporting-integrity-276baaa6.json","targetId":"risk:fin-data-quality-reporting-integrity","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d0747ab9cfbb90840ef57c08224a6bbd2a663a1ffbed39d12043f1341e16292b","properties":{"rationale":"Authority/validity controls reduce recording of invalid or unauthorized transactions.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-14-997de451.json","sourceId":"uc:UC-BCDR-14","targetDetailPath":"/data/v1/records/risk-fin-existence-overstatement-0e009631.json","targetId":"risk:fin-existence-overstatement","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d6640b3a210c70452c36ec1bea6d292ea4d2b20aa84e85033a128f07e81c635b","properties":{"rationale":"References embedded SoD, but the operative dedicated SoD control (conflict matrix, role design, periodic review) is UC-FIN-05; this umbrella only contributes.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-14-997de451.json","sourceId":"uc:UC-BCDR-14","targetDetailPath":"/data/v1/records/risk-fin-segregation-of-duties-eb7ee015.json","targetId":"risk:fin-segregation-of-duties","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e1d3b60ec55d2ba06662780df041b309092dbbf76738f7d5a030fa2f637b11dc","properties":{"control_id":"DSS06","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"equal","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-14-997de451.json","sourceId":"uc:UC-BCDR-14","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-dss06-c2b31b0e.json","targetId":"ctrl:cobit-2019:DSS06","type":"maps_to"}],"schemaVersion":1}