{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"physical","domain":"Financial Reporting Controls (SOX)","type":"preventive"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-FIN-10","description":"Restrict physical custody of financial assets, negotiable instruments, and accounting records to authorized custodians, and perform periodic counts and inspections reconciled to the accounting records. Store transaction inputs, items in processing, and outputs completely, accurately, and timely in accordance with system specifications and retention requirements, protecting them against loss and unauthorized alteration. Evidence includes custody logs, count results, and storage and retention configurations.","details":{"control_category":"physical","control_type":"preventive","domain":"Financial Reporting Controls (SOX)","guidance":[],"members":[{"control_id":"PLC-PHYS","coverage":"full","framework":"sox","relationship":"superset_of"},{"control_id":"PI1.5","coverage":"full","framework":"soc2","relationship":"superset_of"}],"statement":"Restrict physical custody of financial assets, negotiable instruments, and accounting records to authorized custodians, and perform periodic counts and inspections reconciled to the accounting records. Store transaction inputs, items in processing, and outputs completely, accurately, and timely in accordance with system specifications and retention requirements, protecting them against loss and unauthorized alteration. Evidence includes custody logs, count results, and storage and retention configurations.","title":"Safeguard assets and stored financial data","unified_id":"UC-FIN-10"},"id":"uc:UC-FIN-10","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-FIN-10","sourceIds":["soc2","sox"],"sourceUrl":null,"title":"UC-FIN-10 — Safeguard assets and stored financial data","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:269f3acba42579a6bc73c0dd88c43231111049eb12fa94cb7ac24dc8038a554c","properties":{"rationale":"Counts reconciled to records can surface unrecorded or missing assets.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-fin-10-f87a53c1.json","sourceId":"uc:UC-FIN-10","targetDetailPath":"/data/v1/records/risk-fin-completeness-understatement-4b9388d1.json","targetId":"risk:fin-completeness-understatement","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:31ea77b7876a0049f03ed5af95891c225ceb782737684b01042355db3abb5d47","properties":{"rationale":"Periodic counts reconciled to records verify asset/inventory existence, catching overstatement.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-fin-10-f87a53c1.json","sourceId":"uc:UC-FIN-10","targetDetailPath":"/data/v1/records/risk-fin-existence-overstatement-0e009631.json","targetId":"risk:fin-existence-overstatement","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3939d5dee5215ede55fc2775d65265e2fc5e6c9a29250b8396a7b2272900ba88","properties":{"control_id":"PLC-PHYS","coverage":"full","delta":null,"framework":"sox","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"SOX §302/§404 (2002), PCAOB AS 2201"},"sourceDetailPath":"/data/v1/records/uc-uc-fin-10-f87a53c1.json","sourceId":"uc:UC-FIN-10","targetDetailPath":"/data/v1/records/ctrl-sox-plc-phys-1087f5d3.json","targetId":"ctrl:sox:PLC-PHYS","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3dc83163693fc5df12cfa9f8089d93cdf357122f4f06b3271e1dba5c8be3c6ab","properties":{"rationale":"Protecting stored records against loss/unauthorized alteration preserves data integrity and retention.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-fin-10-f87a53c1.json","sourceId":"uc:UC-FIN-10","targetDetailPath":"/data/v1/records/risk-fin-data-quality-reporting-integrity-276baaa6.json","targetId":"risk:fin-data-quality-reporting-integrity","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:63b99959066009fb7396581f8790b61c48e9f8acf6ed913c8acd56401c01bc06","properties":{"rationale":"Restricting physical custody and performing counts prevents and detects theft/embezzlement of assets.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-fin-10-f87a53c1.json","sourceId":"uc:UC-FIN-10","targetDetailPath":"/data/v1/records/risk-fraud-internal-misappropriation-d235cd10.json","targetId":"risk:fraud-internal-misappropriation","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b9d622e2f67556f55261ae4f5e988085968ccaa506b795e041dec12b6e43453d","properties":{"rationale":"Physical counts detect phantom inventory/assets used in statement fraud.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-fin-10-f87a53c1.json","sourceId":"uc:UC-FIN-10","targetDetailPath":"/data/v1/records/risk-fin-financial-statement-fraud-1dd35d5a.json","targetId":"risk:fin-financial-statement-fraud","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d39f4d453935e19e1a4e47e856890b68c17de6d2cd42b9db7e9ebc4bae582ce6","properties":{"control_id":"PI1.5","coverage":"full","delta":null,"framework":"soc2","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2017 TSC"},"sourceDetailPath":"/data/v1/records/uc-uc-fin-10-f87a53c1.json","sourceId":"uc:UC-FIN-10","targetDetailPath":"/data/v1/records/ctrl-soc2-pi1-5-12d8fb47.json","targetId":"ctrl:soc2:PI1.5","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:de35c6c3e24457b3875c6d77f1786bce51fc3a1c2c0a8bcfbd9c5dd94083ef7a","properties":{},"sourceDetailPath":"/data/v1/records/wf-s6-7962d7b6.json","sourceId":"wf:S6","targetDetailPath":"/data/v1/records/uc-uc-fin-10-f87a53c1.json","targetId":"uc:UC-FIN-10","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:eb8c239079ee152c184dda06a87471213e14a78d0900b387ba6f319bd5b5597e","properties":{},"sourceDetailPath":"/data/v1/records/wf-s13-532eba80.json","sourceId":"wf:S13","targetDetailPath":"/data/v1/records/uc-uc-fin-10-f87a53c1.json","targetId":"uc:UC-FIN-10","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f3f30227733d25273eeec42e7e8d4c1b43b9faafde995b451fad2e63e5fca6b3","properties":{},"sourceDetailPath":"/data/v1/records/wf-d23-f8fc17b1.json","sourceId":"wf:D23","targetDetailPath":"/data/v1/records/uc-uc-fin-10-f87a53c1.json","targetId":"uc:UC-FIN-10","type":"tests"}],"schemaVersion":1}