{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"administrative","domain":"Financial Reporting Controls (SOX)","type":"detective"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-FIN-09","description":"Define and communicate the information requirements for financial processing and reporting, including data definitions and report specifications. Validate the completeness and accuracy of system-generated reports, queries, and spreadsheets used in the operation of controls or in financial reporting by verifying source data, report logic and parameters, and totals before reliance, and baseline standard reports with revalidation on change. Retain validation evidence for each report relied upon.","details":{"control_category":"administrative","control_type":"detective","domain":"Financial Reporting Controls (SOX)","guidance":[],"members":[{"control_id":"PLC-IPE","coverage":"full","framework":"sox","relationship":"superset_of"},{"control_id":"PI1.1","coverage":"partial","delta":"UC is scoped to financial-reporting IPE; PI1.1's service-wide processing-objective information - data definitions, quality information, and product/service specifications across the entity's services - is not covered","framework":"soc2","relationship":"intersects_with"}],"statement":"Define and communicate the information requirements for financial processing and reporting, including data definitions and report specifications. Validate the completeness and accuracy of system-generated reports, queries, and spreadsheets used in the operation of controls or in financial reporting by verifying source data, report logic and parameters, and totals before reliance, and baseline standard reports with revalidation on change. Retain validation evidence for each report relied upon.","title":"Ensure quality of information used in reporting","unified_id":"UC-FIN-09"},"id":"uc:UC-FIN-09","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-FIN-09","sourceIds":["soc2","sox"],"sourceUrl":null,"title":"UC-FIN-09 — Ensure quality of information used in reporting","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:1e6dee07156a0fad10d60119233e0d10aef80c412fa62e83fdbce4bcaf408cee","properties":{},"sourceDetailPath":"/data/v1/records/wf-s12-4b5a9849.json","sourceId":"wf:S12","targetDetailPath":"/data/v1/records/uc-uc-fin-09-05f62d2c.json","targetId":"uc:UC-FIN-09","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:1fdcb9cd8e209d42fe03d12c37fed64887d8c07fe6b102a4fe8b8bff63c5ceb6","properties":{},"sourceDetailPath":"/data/v1/records/wf-s6-7962d7b6.json","sourceId":"wf:S6","targetDetailPath":"/data/v1/records/uc-uc-fin-09-05f62d2c.json","targetId":"uc:UC-FIN-09","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:26500624cb539362e5d955bc4f3e73995f8d125341dbb93327a21ee853b32c5b","properties":{"rationale":"IPE validation of tax-provision workpapers and spreadsheets catches computational errors before reliance.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-fin-09-05f62d2c.json","sourceId":"uc:UC-FIN-09","targetDetailPath":"/data/v1/records/risk-fin-tax-provision-misstatement-55b9f382.json","targetId":"risk:fin-tax-provision-misstatement","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3a451515a0a5739efa3c20cd0bb1769f0ff38442f9cf0e1266455cfd1a5fa6b8","properties":{"rationale":"IPE completeness validation confirms reports capture all underlying records.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-fin-09-05f62d2c.json","sourceId":"uc:UC-FIN-09","targetDetailPath":"/data/v1/records/risk-fin-completeness-understatement-4b9388d1.json","targetId":"risk:fin-completeness-understatement","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:47b9cf23fed9101fa9fe22188f873bf2c719d4e3fd1e59f5eadccd3644933184","properties":{"rationale":"This is the IPE control: validating source data, logic and totals of reports/spreadsheets before reliance.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-fin-09-05f62d2c.json","sourceId":"uc:UC-FIN-09","targetDetailPath":"/data/v1/records/risk-fin-data-quality-reporting-integrity-276baaa6.json","targetId":"risk:fin-data-quality-reporting-integrity","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:69a86660352c0428300d7c01318e4d8c9ad99e0d7dd07a7730813b40a5ff2c81","properties":{"rationale":"Reliable IPE underpins control operation; weak IPE is a common material-weakness root cause.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-fin-09-05f62d2c.json","sourceId":"uc:UC-FIN-09","targetDetailPath":"/data/v1/records/risk-fin-icfr-material-weakness-cdd66323.json","targetId":"risk:fin-icfr-material-weakness","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c24e5585a268edd0963a331203e0a97b4be533d42acb19cc2ebf5f18488732ab","properties":{},"sourceDetailPath":"/data/v1/records/wf-d23-f8fc17b1.json","sourceId":"wf:D23","targetDetailPath":"/data/v1/records/uc-uc-fin-09-05f62d2c.json","targetId":"uc:UC-FIN-09","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:dc838e86f734bf7681a330907bc22964e0d1e63151b76dc06208ca64d24788e7","properties":{"rationale":"Validating report logic, parameters and totals catches calculation errors in reports and spreadsheets.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-fin-09-05f62d2c.json","sourceId":"uc:UC-FIN-09","targetDetailPath":"/data/v1/records/risk-fin-accuracy-measurement-errors-fd727255.json","targetId":"risk:fin-accuracy-measurement-errors","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e69469f9528c248441e6177382de7c03bf8ff16909c6451729635958fb89849a","properties":{"control_id":"PI1.1","coverage":"partial","delta":"UC is scoped to financial-reporting IPE; PI1.1's service-wide processing-objective information - data definitions, quality information, and product/service specifications across the entity's services - is not covered","framework":"soc2","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2017 TSC"},"sourceDetailPath":"/data/v1/records/uc-uc-fin-09-05f62d2c.json","sourceId":"uc:UC-FIN-09","targetDetailPath":"/data/v1/records/ctrl-soc2-pi1-1-e2088505.json","targetId":"ctrl:soc2:PI1.1","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ee41b85adbf6ad46ccd8a408d90fdbf11db2418f0cb5130c9d07f83fee98e02c","properties":{"control_id":"PLC-IPE","coverage":"full","delta":null,"framework":"sox","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"SOX §302/§404 (2002), PCAOB AS 2201"},"sourceDetailPath":"/data/v1/records/uc-uc-fin-09-05f62d2c.json","sourceId":"uc:UC-FIN-09","targetDetailPath":"/data/v1/records/ctrl-sox-plc-ipe-f81a8f21.json","targetId":"ctrl:sox:PLC-IPE","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f69306b3bd70435ca895dc493fbbc32fafb239dc79c47ad43481a48342833c9f","properties":{},"sourceDetailPath":"/data/v1/records/wf-s4-719bcf0f.json","sourceId":"wf:S4","targetDetailPath":"/data/v1/records/uc-uc-fin-09-05f62d2c.json","targetId":"uc:UC-FIN-09","type":"tests"}],"schemaVersion":1}