{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"administrative","domain":"Risk Assessment & Management","type":"preventive"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-RISK-05","description":"Established lines of communication ensure risk information flows across the organization and with external stakeholders, including risks from suppliers and other third parties. Stakeholders are appropriately and inclusively involved through structured communication and consultation at each step of the risk process, and human and cultural factors are explicitly considered. Consultation records, meeting minutes, and risk communication distributions evidence operation.","details":{"control_category":"administrative","control_type":"preventive","domain":"Risk Assessment & Management","guidance":[],"members":[{"control_id":"31000-P4","coverage":"full","framework":"iso-31000","relationship":"superset_of"},{"control_id":"31000-P7","coverage":"full","framework":"iso-31000","relationship":"superset_of"},{"control_id":"31000-PR1","coverage":"full","framework":"iso-31000","relationship":"superset_of"},{"control_id":"GV.RM-05","coverage":"full","framework":"nist-csf-2","relationship":"superset_of"}],"statement":"Established lines of communication ensure risk information flows across the organization and with external stakeholders, including risks from suppliers and other third parties. Stakeholders are appropriately and inclusively involved through structured communication and consultation at each step of the risk process, and human and cultural factors are explicitly considered. Consultation records, meeting minutes, and risk communication distributions evidence operation.","title":"Communicate and consult with stakeholders on risk","unified_id":"UC-RISK-05"},"id":"uc:UC-RISK-05","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-RISK-05","sourceIds":["iso-31000","nist-csf-2"],"sourceUrl":null,"title":"UC-RISK-05 — Communicate and consult with stakeholders on risk","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:160fcd5222abfd3f9a3f9e456c860aee846204a60b0d21f4915ca733c617bcaf","properties":{"control_id":"GV.RM-05","coverage":"full","delta":null,"framework":"nist-csf-2","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2.0"},"sourceDetailPath":"/data/v1/records/uc-uc-risk-05-e2fc10a6.json","sourceId":"uc:UC-RISK-05","targetDetailPath":"/data/v1/records/ctrl-nist-csf-2-gv-rm-05-d4ec8a45.json","targetId":"ctrl:nist-csf-2:GV.RM-05","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3b0670471e888d313b22d556ad8f7e5f1a50dc984be7eaaae37ffe3fd4b2eee4","properties":{"control_id":"31000-P4","coverage":"full","delta":null,"framework":"iso-31000","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2018"},"sourceDetailPath":"/data/v1/records/uc-uc-risk-05-e2fc10a6.json","sourceId":"uc:UC-RISK-05","targetDetailPath":"/data/v1/records/ctrl-iso-31000-31000-p4-400c4417.json","targetId":"ctrl:iso-31000:31000-P4","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4fc04897f7a28ac3f07a7ecaeac439cde42f10cbebb114a4e68c208ac8a5c94a","properties":{},"sourceDetailPath":"/data/v1/records/wf-g5-873e0b12.json","sourceId":"wf:G5","targetDetailPath":"/data/v1/records/uc-uc-risk-05-e2fc10a6.json","targetId":"uc:UC-RISK-05","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7877f755e6a303523d611a8c97fe31126acb9a876f035e0a367a7ad44141b750","properties":{"rationale":"","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-risk-05-e2fc10a6.json","sourceId":"uc:UC-RISK-05","targetDetailPath":"/data/v1/records/risk-financial-credit-market-risk-b9cbc5a3.json","targetId":"risk:financial-credit-market-risk","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:bc705a063cbaf0630b6ec6695e7e290d46b65c7cf4a5be3c50e44f5ee369af01","properties":{"rationale":"","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-risk-05-e2fc10a6.json","sourceId":"uc:UC-RISK-05","targetDetailPath":"/data/v1/records/risk-ops-documentation-account-management-d25eb1fe.json","targetId":"risk:ops-documentation-account-management","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d655ca9213949ed87040d030a989bffdcd3db124beecc4962a5d2ee474a2a159","properties":{"rationale":"Structured, inclusive stakeholder consultation on risk, considering human/cultural factors, sustains stakeholder relationships and social license, a contributor to trust.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-risk-05-e2fc10a6.json","sourceId":"uc:UC-RISK-05","targetDetailPath":"/data/v1/records/risk-reputational-stakeholder-trust-23d21e70.json","targetId":"risk:reputational-stakeholder-trust","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:eddcc856f17ae0a9bd7f09f8f00b98d3068b6d3b88595bb3581d2b6465c4ad1a","properties":{},"sourceDetailPath":"/data/v1/records/wf-g23-1ec4df53.json","sourceId":"wf:G23","targetDetailPath":"/data/v1/records/uc-uc-risk-05-e2fc10a6.json","targetId":"uc:UC-RISK-05","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f3a7dc64ac73ca90a500746cdb2ac423a02e06c0dfdcafa398899976a8741109","properties":{},"sourceDetailPath":"/data/v1/records/wf-g4-a265153d.json","sourceId":"wf:G4","targetDetailPath":"/data/v1/records/uc-uc-risk-05-e2fc10a6.json","targetId":"uc:UC-RISK-05","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:fb5f63e0e4615c9d3de78b8439b6113a2d37b7efaff930014bd9c9c2615d5c2f","properties":{"control_id":"31000-PR1","coverage":"full","delta":null,"framework":"iso-31000","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2018"},"sourceDetailPath":"/data/v1/records/uc-uc-risk-05-e2fc10a6.json","sourceId":"uc:UC-RISK-05","targetDetailPath":"/data/v1/records/ctrl-iso-31000-31000-pr1-74420c90.json","targetId":"ctrl:iso-31000:31000-PR1","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:fd3702f43d19f090d9afe4ab6da6e51ea5ffeefd91cf92a393a00c3e8d411aad","properties":{"control_id":"31000-P7","coverage":"full","delta":null,"framework":"iso-31000","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2018"},"sourceDetailPath":"/data/v1/records/uc-uc-risk-05-e2fc10a6.json","sourceId":"uc:UC-RISK-05","targetDetailPath":"/data/v1/records/ctrl-iso-31000-31000-p7-3d100675.json","targetId":"ctrl:iso-31000:31000-P7","type":"maps_to"}],"schemaVersion":1}