{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"administrative","domain":"Governance, Policy & Oversight","type":"preventive"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-GOV-07","description":"Management requires all personnel to apply information security in accordance with established policies and procedures and holds individuals accountable for their internal control responsibilities. Accountability is enforced through defined expectations, documented rules of behavior acknowledged before access is granted and re-acknowledged when updated, performance measures and incentives, and disciplinary consequences for violations.","details":{"control_category":"administrative","control_type":"preventive","domain":"Governance, Policy & Oversight","guidance":[],"members":[{"control_id":"CC1.5","coverage":"full","framework":"soc2","relationship":"superset_of"},{"control_id":"P5","coverage":"full","framework":"coso-ic","relationship":"superset_of"},{"control_id":"A.5.4","coverage":"full","framework":"iso-27001","relationship":"superset_of"},{"control_id":"PL-4","coverage":"full","framework":"nist-800-53","relationship":"superset_of"}],"statement":"Management requires all personnel to apply information security in accordance with established policies and procedures and holds individuals accountable for their internal control responsibilities. Accountability is enforced through defined expectations, documented rules of behavior acknowledged before access is granted and re-acknowledged when updated, performance measures and incentives, and disciplinary consequences for violations.","title":"Hold individuals accountable for control responsibilities","unified_id":"UC-GOV-07"},"id":"uc:UC-GOV-07","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-GOV-07","sourceIds":["coso-ic","iso-27001","nist-800-53","soc2"],"sourceUrl":null,"title":"UC-GOV-07 — Hold individuals accountable for control responsibilities","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0920109df2c33e430e8d7fa9bd754eff3127f61bc46fefd27d1acafbcf2d6292","properties":{},"sourceDetailPath":"/data/v1/records/wf-g18-e2eb9758.json","sourceId":"wf:G18","targetDetailPath":"/data/v1/records/uc-uc-gov-07-2a8998f7.json","targetId":"uc:UC-GOV-07","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:117b11429febc91b344fc2cdc01061754d11df7730d1cce2dcfc18609aaea6df","properties":{},"sourceDetailPath":"/data/v1/records/wf-d06-c9616fb8.json","sourceId":"wf:D06","targetDetailPath":"/data/v1/records/uc-uc-gov-07-2a8998f7.json","targetId":"uc:UC-GOV-07","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:24fac1046b37ebc9bdc5375cd7c40130fdd31d0f4733479e05795a6b2589d023","properties":{"control_id":"A.5.4","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-07-2a8998f7.json","sourceId":"uc:UC-GOV-07","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-4-779338c6.json","targetId":"ctrl:iso-27001:A.5.4","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4d0524915b27f3b8c5e33715fcab0995a7527ac146902380305610fd40e137f6","properties":{"control_id":"PL-4","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-07-2a8998f7.json","sourceId":"uc:UC-GOV-07","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-pl-4-a50e5417.json","targetId":"ctrl:nist-800-53:PL-4","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:522d28aed24ab32fe41449ac950acc152ef604cf0a9e3b0e0aee1ab0b91027e2","properties":{"control_id":"P5","coverage":"full","delta":null,"framework":"coso-ic","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2013"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-07-2a8998f7.json","sourceId":"uc:UC-GOV-07","targetDetailPath":"/data/v1/records/ctrl-coso-ic-p5-7f62f522.json","targetId":"ctrl:coso-ic:P5","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7591b3c7fb660817b9ea56a62830033063a656a60c3d15f87674d06b3b09daaf","properties":{},"sourceDetailPath":"/data/v1/records/wf-s17-e5271161.json","sourceId":"wf:S17","targetDetailPath":"/data/v1/records/uc-uc-gov-07-2a8998f7.json","targetId":"uc:UC-GOV-07","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7d9b46f4ba37a47597f9c40d452679ab297a9578396b2d0fbd5ed75390fc7366","properties":{"rationale":"Documented rules of behavior and disciplinary consequences for violations supply the deterrent and disciplinary process the risk lacks.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-07-2a8998f7.json","sourceId":"uc:UC-GOV-07","targetDetailPath":"/data/v1/records/risk-hr-missing-security-terms-discipline-0a47163d.json","targetId":"risk:hr-missing-security-terms-discipline","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:9301ca2d3b6247b77f710c9a4e2ab2d8e34007516a7bf2c7a06e1e0ae25041e9","properties":{"rationale":"Holding individuals accountable for control responsibilities (COSO P5) directly strengthens the control environment.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-07-2a8998f7.json","sourceId":"uc:UC-GOV-07","targetDetailPath":"/data/v1/records/risk-gov-weak-internal-control-7acb9117.json","targetId":"risk:gov-weak-internal-control","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ad0a7f92ed019cfadbee8cca5e7b258f735ec0336ddf667f2a538e17bb9665c7","properties":{"control_id":"CC1.5","coverage":"full","delta":null,"framework":"soc2","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2017 TSC"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-07-2a8998f7.json","sourceId":"uc:UC-GOV-07","targetDetailPath":"/data/v1/records/ctrl-soc2-cc1-5-ce418f10.json","targetId":"ctrl:soc2:CC1.5","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b5c0813a24eefc7f85c7379e992dae11dc38dc125be2d245d415b64686bf1396","properties":{},"sourceDetailPath":"/data/v1/records/wf-g34-1b925ad7.json","sourceId":"wf:G34","targetDetailPath":"/data/v1/records/uc-uc-gov-07-2a8998f7.json","targetId":"uc:UC-GOV-07","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b82471ec87262e280f573acf30e95f7aef999bef8fa83dd75f57c0b8f66f6911","properties":{},"sourceDetailPath":"/data/v1/records/wf-a15-e859f6b8.json","sourceId":"wf:A15","targetDetailPath":"/data/v1/records/uc-uc-gov-07-2a8998f7.json","targetId":"uc:UC-GOV-07","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:cda48ad4d1dec1640413617ad43f47543331ae1078834e438135c46b7c8195d3","properties":{"rationale":"Accountability, performance incentives, and disciplinary consequences deter insider misappropriation.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-07-2a8998f7.json","sourceId":"uc:UC-GOV-07","targetDetailPath":"/data/v1/records/risk-fraud-internal-misappropriation-d235cd10.json","targetId":"risk:fraud-internal-misappropriation","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ff23399793aa91305033f7e0fc2293ed90cea3e400bfb2cd88877338b47f17e1","properties":{},"sourceDetailPath":"/data/v1/records/wf-c7-acbef2ee.json","sourceId":"wf:C7","targetDetailPath":"/data/v1/records/uc-uc-gov-07-2a8998f7.json","targetId":"uc:UC-GOV-07","type":"oversees"}],"schemaVersion":1}