{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"administrative","domain":"Secure Development (SDLC) & Application Security","type":"preventive"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-SDLC-14","description":"Plan and agree audit and assurance testing of operational systems between the tester and appropriate management before testing begins: define and approve scope, limit testers to read-only access where possible or use isolated copies, schedule tests to minimize disruption, and monitor and log all audit access.","details":{"control_category":"administrative","control_type":"preventive","domain":"Secure Development (SDLC) & Application Security","guidance":[],"members":[{"control_id":"A.8.34","coverage":"full","framework":"iso-27001","relationship":"equal"}],"statement":"Plan and agree audit and assurance testing of operational systems between the tester and appropriate management before testing begins: define and approve scope, limit testers to read-only access where possible or use isolated copies, schedule tests to minimize disruption, and monitor and log all audit access.","title":"Protect production systems during audit testing","unified_id":"UC-SDLC-14"},"id":"uc:UC-SDLC-14","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-SDLC-14","sourceIds":["iso-27001"],"sourceUrl":null,"title":"UC-SDLC-14 — Protect production systems during audit testing","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:44bab248029aef50efd571ac843f5a4fd7daa6a700820f0fad211eac27e548d4","properties":{"control_id":"A.8.34","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"equal","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-14-5c9b0e48.json","sourceId":"uc:UC-SDLC-14","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-8-34-22833492.json","targetId":"ctrl:iso-27001:A.8.34","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4f246e5a1616f45f0d4b08fed6f4779c383a8822767e63331ecc527198dacac2","properties":{"rationale":"Restricting audit testers to read-only access or isolated copies prevents accidental or intentional alteration/deletion of production data during testing.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-14-5c9b0e48.json","sourceId":"uc:UC-SDLC-14","targetDetailPath":"/data/v1/records/risk-data-corruption-integrity-loss-e771738a.json","targetId":"risk:data-corruption-integrity-loss","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:8332f5f06e3b5be66e450cab1e8aa764df11c627752367b18944c7026c3f1be2","properties":{"rationale":"Limiting testers to read-only/isolated copies and scheduling tests to minimize disruption prevents audit testing from degrading production availability.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-14-5c9b0e48.json","sourceId":"uc:UC-SDLC-14","targetDetailPath":"/data/v1/records/risk-tech-software-system-failure-2e2c5364.json","targetId":"risk:tech-software-system-failure","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c66b92cf49f1f5d5eed1e71adb152dcbe855ee8a8b1fbde477babbd7c46def7a","properties":{},"sourceDetailPath":"/data/v1/records/wf-c10-29ff1ddb.json","sourceId":"wf:C10","targetDetailPath":"/data/v1/records/uc-uc-sdlc-14-5c9b0e48.json","targetId":"uc:UC-SDLC-14","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f8b4aacf42d19fae5426a59cc947eb6eb064aacb6e8d91be3399a07cc819ada0","properties":{},"sourceDetailPath":"/data/v1/records/wf-d06-c9616fb8.json","sourceId":"wf:D06","targetDetailPath":"/data/v1/records/uc-uc-sdlc-14-5c9b0e48.json","targetId":"uc:UC-SDLC-14","type":"tests"}],"schemaVersion":1}