{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"administrative","domain":"Incident Management & Response","type":"corrective"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-IR-10","description":"Hold post-incident reviews for incidents meeting defined thresholds to capture what happened, what worked, and what failed. Convert lessons into tracked corrective actions — updates to controls, plans, training, and configurations — and use incident trends to identify and reduce recurring exposure. Communicate identified deficiencies and corrective-action status in a timely manner to the parties responsible for remediation, including senior management and, where significant, the board.","details":{"control_category":"administrative","control_type":"corrective","domain":"Incident Management & Response","guidance":[],"members":[{"control_id":"A.5.27","coverage":"full","framework":"iso-27001","relationship":"superset_of"},{"control_id":"P17","coverage":"partial","delta":"covers all internal-control deficiencies, beyond incident-derived lessons","framework":"coso-ic","relationship":"intersects_with"}],"statement":"Hold post-incident reviews for incidents meeting defined thresholds to capture what happened, what worked, and what failed. Convert lessons into tracked corrective actions — updates to controls, plans, training, and configurations — and use incident trends to identify and reduce recurring exposure. Communicate identified deficiencies and corrective-action status in a timely manner to the parties responsible for remediation, including senior management and, where significant, the board.","title":"Learn from incidents and communicate corrective actions","unified_id":"UC-IR-10"},"id":"uc:UC-IR-10","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-IR-10","sourceIds":["coso-ic","iso-27001"],"sourceUrl":null,"title":"UC-IR-10 — Learn from incidents and communicate corrective actions","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:472ae1e60ada062f2a2d92a1e647622d0bcc0ad0d1986ecf55fb37d5af70d5a7","properties":{},"sourceDetailPath":"/data/v1/records/wf-d06-c9616fb8.json","sourceId":"wf:D06","targetDetailPath":"/data/v1/records/uc-uc-ir-10-072c0403.json","targetId":"uc:UC-IR-10","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:73c1e2950e16821930d708b7ad25bf221676650298d136c8d0c766599b260715","properties":{"control_id":"P17","coverage":"partial","delta":"covers all internal-control deficiencies, beyond incident-derived lessons","framework":"coso-ic","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2013"},"sourceDetailPath":"/data/v1/records/uc-uc-ir-10-072c0403.json","sourceId":"uc:UC-IR-10","targetDetailPath":"/data/v1/records/ctrl-coso-ic-p17-277098f3.json","targetId":"ctrl:coso-ic:P17","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7a9ed82b78b92593ba2e35df42ddd1e931e7239c55b1217a1e239d67653b158a","properties":{"rationale":"Converting post-incident lessons into corrective actions improves procedures over time — a second-order feedback loop presupposing the base procedures, not the operative defense against their absence.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ir-10-072c0403.json","sourceId":"uc:UC-IR-10","targetDetailPath":"/data/v1/records/risk-ir-no-response-procedures-90eb7ba1.json","targetId":"risk:ir-no-response-procedures","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:9403cf904667719fc406465da866f40b906ceac5f0f09e4b11368ffad43c549c","properties":{},"sourceDetailPath":"/data/v1/records/wf-g7-9762f11b.json","sourceId":"wf:G7","targetDetailPath":"/data/v1/records/uc-uc-ir-10-072c0403.json","targetId":"uc:UC-IR-10","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:9da2566dd4bcec9ec28079e30f249b4e4191c02c2bba10760bf3e22b7202af97","properties":{"control_id":"A.5.27","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-ir-10-072c0403.json","sourceId":"uc:UC-IR-10","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-27-df970c02.json","targetId":"ctrl:iso-27001:A.5.27","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c4370a2630da7ddd6eed539048b4d63f04d9fe338fa643679e549e2790a598a5","properties":{},"sourceDetailPath":"/data/v1/records/wf-d24-a9f3daf6.json","sourceId":"wf:D24","targetDetailPath":"/data/v1/records/uc-uc-ir-10-072c0403.json","targetId":"uc:UC-IR-10","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d85af51bfc8d61535a454fb63116878dc0365a327e3695e2415e3f11fc06ffe7","properties":{},"sourceDetailPath":"/data/v1/records/wf-c3-4a88b225.json","sourceId":"wf:C3","targetDetailPath":"/data/v1/records/uc-uc-ir-10-072c0403.json","targetId":"uc:UC-IR-10","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:eeea4e843090f7187b9626c9714d0140d2b1ae180d173087a55f404f17764bf6","properties":{},"sourceDetailPath":"/data/v1/records/wf-r16-5b93e206.json","sourceId":"wf:R16","targetDetailPath":"/data/v1/records/uc-uc-ir-10-072c0403.json","targetId":"uc:UC-IR-10","type":"operates"}],"schemaVersion":1}