{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"administrative","domain":"Risk Assessment & Management","type":"corrective"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-RISK-14","description":"Control deficiencies and assessment findings are evaluated and communicated in a timely manner to the parties responsible for corrective action, including senior management and the board as appropriate. A remediation action plan (or equivalent log) documents planned corrective actions, owners, required resources, and completion dates for each finding. Plans are maintained, kept current, and tracked through closure.","details":{"control_category":"administrative","control_type":"corrective","domain":"Risk Assessment & Management","guidance":[],"members":[{"control_id":"CA-5","coverage":"full","framework":"nist-800-53","relationship":"superset_of"},{"control_id":"PM-4","coverage":"full","framework":"nist-800-53","relationship":"superset_of"},{"control_id":"CC4.2","coverage":"full","framework":"soc2","relationship":"superset_of"}],"statement":"Control deficiencies and assessment findings are evaluated and communicated in a timely manner to the parties responsible for corrective action, including senior management and the board as appropriate. A remediation action plan (or equivalent log) documents planned corrective actions, owners, required resources, and completion dates for each finding. Plans are maintained, kept current, and tracked through closure.","title":"Track deficiencies to closure with remediation action plans","unified_id":"UC-RISK-14"},"id":"uc:UC-RISK-14","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-RISK-14","sourceIds":["nist-800-53","soc2"],"sourceUrl":null,"title":"UC-RISK-14 — Track deficiencies to closure with remediation action plans","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:004befc963c68e251a464c686bc70c25105d8e1aec69d028f6ee34467a333bb4","properties":{},"sourceDetailPath":"/data/v1/records/wf-g32-7729a23e.json","sourceId":"wf:G32","targetDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","targetId":"uc:UC-RISK-14","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0422a46450d702d7dbb0107b22e20d5dc22ffe94bd68dfdd6f27ef557669b882","properties":{},"sourceDetailPath":"/data/v1/records/wf-c1-f9e3db77.json","sourceId":"wf:C1","targetDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","targetId":"uc:UC-RISK-14","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:04f1e27db04b2eab7c627a6607d95f4925c4a792b5daaf7515e930979dafdf4f","properties":{},"sourceDetailPath":"/data/v1/records/wf-d24-a9f3daf6.json","sourceId":"wf:D24","targetDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","targetId":"uc:UC-RISK-14","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:05d66e8976e109b1ebda523e8717182e9404528729a1b98fd72a1c18d6bd145b","properties":{},"sourceDetailPath":"/data/v1/records/wf-s16-ff1d0766.json","sourceId":"wf:S16","targetDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","targetId":"uc:UC-RISK-14","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:1258e57d0320b48a96e6bca1688080e830171c774fefc6a693bb46fcb8daa40e","properties":{"control_id":"CA-5","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","sourceId":"uc:UC-RISK-14","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-ca-5-d5a5bd4b.json","targetId":"ctrl:nist-800-53:CA-5","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:14b747aadffe9d559e9e1b472f7bf2dbe5d828cc342588591d64cb19c660b319","properties":{},"sourceDetailPath":"/data/v1/records/wf-g15-1231bc14.json","sourceId":"wf:G15","targetDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","targetId":"uc:UC-RISK-14","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:2171fa6d3ae80ebe00dc5a275d29e1429a02b31b38a74577c20eb15d9723788b","properties":{},"sourceDetailPath":"/data/v1/records/wf-d05-2302db1f.json","sourceId":"wf:D05","targetDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","targetId":"uc:UC-RISK-14","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:252c84fd319ea6cb0455c7eb6fc88af12c07dccc1781fb8b5da2d0799803d1f1","properties":{},"sourceDetailPath":"/data/v1/records/wf-g6-86d7ed66.json","sourceId":"wf:G6","targetDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","targetId":"uc:UC-RISK-14","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:2c69aee2901ae63887c71e406df78dc83387230ca2689f7fe4d7f01e44328caa","properties":{},"sourceDetailPath":"/data/v1/records/wf-c3-4a88b225.json","sourceId":"wf:C3","targetDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","targetId":"uc:UC-RISK-14","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3710e1554dc1111d59b1f79a6858def2870043039f3df52170067ae59b09d11b","properties":{"rationale":"","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","sourceId":"uc:UC-RISK-14","targetDetailPath":"/data/v1/records/risk-ops-counterparty-settlement-disputes-eaf4600f.json","targetId":"risk:ops-counterparty-settlement-disputes","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4f4d05fdab884f4e70b90cec0b45f87fd7c59ae6305c9d11290a027faecfd695","properties":{},"sourceDetailPath":"/data/v1/records/wf-c2-a1078981.json","sourceId":"wf:C2","targetDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","targetId":"uc:UC-RISK-14","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:516f58467ae8f7e02d376afedecde6eb4b4ac7d67bcd99f89cba475ed6439b1b","properties":{},"sourceDetailPath":"/data/v1/records/wf-s26-9c764357.json","sourceId":"wf:S26","targetDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","targetId":"uc:UC-RISK-14","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:536509a9d401b13f6e71aa1c07e2d8f6f9777552c7881d70126ed9284cb55e50","properties":{},"sourceDetailPath":"/data/v1/records/wf-d37-08cef6d7.json","sourceId":"wf:D37","targetDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","targetId":"uc:UC-RISK-14","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:5b7be723fb0f164ef5cdc55e8a504dbd21539a17751683ec74d21d20eb8abbbe","properties":{"rationale":"Tracking deficiencies and findings to closure via remediation plans helps ensure identified issues are treated, but it is a corrective loop over findings, not the operative identify-analyse-evaluate-treat process; contributor.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","sourceId":"uc:UC-RISK-14","targetDetailPath":"/data/v1/records/risk-risk-assessment-inadequate-328128b5.json","targetId":"risk:risk-assessment-inadequate","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7545a153e7b2924ea13b3266bac6a795517c437de9106dfc2f08ce29a21217bb","properties":{},"sourceDetailPath":"/data/v1/records/wf-r4-097c6fc4.json","sourceId":"wf:R4","targetDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","targetId":"uc:UC-RISK-14","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7ac2a396901e47842d18a5d9d490f087676414dcb50e72e151dc1f8bae426ebc","properties":{},"sourceDetailPath":"/data/v1/records/wf-a4-1cfdd4d5.json","sourceId":"wf:A4","targetDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","targetId":"uc:UC-RISK-14","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7de928e9b6bdb4f5511217bc7097bfae92d855bc2895d3e738f748142a6e2c27","properties":{},"sourceDetailPath":"/data/v1/records/wf-c17-334c380f.json","sourceId":"wf:C17","targetDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","targetId":"uc:UC-RISK-14","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:807d133d67b44710c9c60794b198d6f6060299b5fc2befcabd673a3263ce7197","properties":{},"sourceDetailPath":"/data/v1/records/wf-s3-0d4673bb.json","sourceId":"wf:S3","targetDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","targetId":"uc:UC-RISK-14","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:980c1f86535f886766712bf23c8b454f83935afe74d5b3424ac77f9b9492df20","properties":{},"sourceDetailPath":"/data/v1/records/wf-c7-acbef2ee.json","sourceId":"wf:C7","targetDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","targetId":"uc:UC-RISK-14","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b432dde0101f96e1ebab5bc4ab4eeae7479f422c4bc10a4a3afacb73cf70e4c3","properties":{},"sourceDetailPath":"/data/v1/records/wf-c9-75fb1752.json","sourceId":"wf:C9","targetDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","targetId":"uc:UC-RISK-14","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:be6a537a02fa8909cc52a806f8dfa22ccecccebe8f9380b0f969f7c773c9865a","properties":{},"sourceDetailPath":"/data/v1/records/wf-g37-70c53e02.json","sourceId":"wf:G37","targetDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","targetId":"uc:UC-RISK-14","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c29776f1905d643708fdc10e397ef63a78d30289d3fa3f05d786cf5d553d96b5","properties":{},"sourceDetailPath":"/data/v1/records/wf-d32-3114234e.json","sourceId":"wf:D32","targetDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","targetId":"uc:UC-RISK-14","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c5d760a449feda01f47e31c45e8ddc213d3c4565c6561064234d6f5844e715a0","properties":{"control_id":"CC4.2","coverage":"full","delta":null,"framework":"soc2","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2017 TSC"},"sourceDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","sourceId":"uc:UC-RISK-14","targetDetailPath":"/data/v1/records/ctrl-soc2-cc4-2-1538fe1e.json","targetId":"ctrl:soc2:CC4.2","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c6bad9fe46120dd39682b49906e854c84c023cd872e808a8743a60ebdd5e840e","properties":{},"sourceDetailPath":"/data/v1/records/wf-d02-28b5b7ac.json","sourceId":"wf:D02","targetDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","targetId":"uc:UC-RISK-14","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c7d92540aeb4cd3b4eea63dbec7186aa7e5f0b2066bb761891a26ac7ef58c6de","properties":{},"sourceDetailPath":"/data/v1/records/wf-a15-e859f6b8.json","sourceId":"wf:A15","targetDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","targetId":"uc:UC-RISK-14","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c8e7676f71e6dfa957ebb063cacb43cb884afe78e1846b7ce79c4a5636ff5a43","properties":{},"sourceDetailPath":"/data/v1/records/wf-d51-1297db2a.json","sourceId":"wf:D51","targetDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","targetId":"uc:UC-RISK-14","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:da5c9e831caedff584042fe953847c6e7b93d8db4aa19235e3bc43a8e1b3999d","properties":{},"sourceDetailPath":"/data/v1/records/wf-c71-7cec1736.json","sourceId":"wf:C71","targetDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","targetId":"uc:UC-RISK-14","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e57d7004c0eed983d03b0c14936e449ec9e32615de4bbb0f3ebc34db6c02edec","properties":{"control_id":"PM-4","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","sourceId":"uc:UC-RISK-14","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-pm-4-c70cc87f.json","targetId":"ctrl:nist-800-53:PM-4","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:edc3441e4c32dfc5ee17a83a42a00c71aeadc97d81ecea10754da56cce6fa1a6","properties":{},"sourceDetailPath":"/data/v1/records/wf-d50-366fc8d4.json","sourceId":"wf:D50","targetDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","targetId":"uc:UC-RISK-14","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f758511bd9a9d0bd988c97e5bc60869498358fec759ad9d659772cfcce08bfea","properties":{},"sourceDetailPath":"/data/v1/records/wf-g10-3ef59294.json","sourceId":"wf:G10","targetDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","targetId":"uc:UC-RISK-14","type":"oversees"}],"schemaVersion":1}