{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","download":{"releaseId":"sha256:568bf412eaf4229147a7556e111d5bda5641422d9748cdb97eb66cf112123da4","slug":"itgc-change-provisioning-testing","url":"/assets/agent_workflow-itgc-change-provisioning-testing-a64b8ccd.0f357060aeceb18e.json"},"kind":"record","record":{"attributes":{"department":"internal-audit","domain":"audit","lineOfDefense":"assure"},"canonicalUrl":"https://workflow-library.com/all/?w=itgc-change-provisioning-testing","description":"Runs ON a control item (a change-management or access-provisioning ITGC). Validates the change and provisioning populations for the period, draws reproducible samples, tests each sampled ticket against the control attributes (approval before migration, segregation of developer and migrator, approval before access, access matches the requested profile), records design and operating conclusions on the control, and raises every exception as an issue.","details":{"canonicalUrl":"https://workflow-library.com/all/?w=itgc-change-provisioning-testing","capabilities":["audit-testing"],"controls":["UC-ACCESS-01","UC-ACCESS-03","UC-ACCESS-16"],"domains":["audit"],"lineOfDefense":"assure","mappingStatus":"mapped","releaseId":"sha256:568bf412eaf4229147a7556e111d5bda5641422d9748cdb97eb66cf112123da4","roleIntegrity":{"activityCount":0,"ermPhases":[],"lineRoles":[],"serviceModes":[],"warnings":[]},"sourceTemplateId":"workflow-library:itgc-change-provisioning-testing","standards":["iia-2024","cobit-2019","sox"],"teams":["internal-audit"]},"id":"wf:A18","mapUrl":"https://controlsmap.com/?v=1&node=wf%3AA18","slug":"itgc-change-provisioning-testing","sourceIds":["aiuc-1","iso-27001","nist-800-53","nist-ai-agent-identity","nist-csf-2","pci-dss","soc1","soc2","sox"],"sourceUrl":null,"title":"ITGC Change & Provisioning Testing","type":"workflow"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4a213726cca3a4e6677d9d25c6e53b232e846c4d877f2aa9b4760bce6289e947","properties":{},"sourceDetailPath":"/data/v1/records/wf-a18-be3cee23.json","sourceId":"wf:A18","targetDetailPath":"/data/v1/records/uc-uc-access-03-43eeb212.json","targetId":"uc:UC-ACCESS-03","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:86db0c9873322d1205c689f0601c544cb2490815b2f5777d952cdc027a7dcd5c","properties":{},"sourceDetailPath":"/data/v1/records/wf-a18-be3cee23.json","sourceId":"wf:A18","targetDetailPath":"/data/v1/records/uc-uc-access-01-1e70b922.json","targetId":"uc:UC-ACCESS-01","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a32c1438848292071633ba6932b26ecd566dfc1598b5a5ed0957c7a2dcbd2499","properties":{},"sourceDetailPath":"/data/v1/records/wf-a18-be3cee23.json","sourceId":"wf:A18","targetDetailPath":"/data/v1/records/uc-uc-access-16-7a8d6d65.json","targetId":"uc:UC-ACCESS-16","type":"tests"}],"schemaVersion":1}