{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","download":{"releaseId":"sha256:362c8362a87fd9c6ed9bbc66ac1f6bf55e7701d605a4f7fce99f08d6b1c1206f","slug":"controls-design","url":"/assets/agent_workflow-controls-design-7c5457b3.36aa44a5a7df1d57.json"},"kind":"record","record":{"attributes":{"department":"operations","domain":"controls","lineOfDefense":"operate"},"canonicalUrl":"https://workflow-library.com/all/?w=controls-design","description":"This instance runs against the Control item it creates: drafted at the objective step and committed to the Risk & Control Matrix (RCM) at record-the-control, so the archived instance is that control's design audit trail. It consumes no upstream workflow — a control is motivated by an existing Risk item or an audit Issue (finding/deficiency), which it links to rather than rebuilds. Design one new control end to end: control objective and attributes, risk mapping to the register, evidence and test-approach design, RCM record creation, disposition, packaging, and archival. The named deliverable is a new, uniquely identified control record in the RCM (a Control item) carrying a design determination statement, plus its test plan. In scope: designing and recording a single new control so it is operable and testable. Out of scope: executing the control's operating-effectiveness tests and remediating deficiencies, which are handed off downstream to the Security Control Assessment & POA&M Remediation workflow.","details":{"canonicalUrl":"https://workflow-library.com/all/?w=controls-design","capabilities":[],"controls":["UC-ACCESS-15"],"domains":["controls"],"lineOfDefense":"operate","mappingStatus":"mapped","releaseId":"sha256:362c8362a87fd9c6ed9bbc66ac1f6bf55e7701d605a4f7fce99f08d6b1c1206f","roleIntegrity":{"activityCount":0,"ermPhases":[],"lineRoles":[],"serviceModes":[],"warnings":[]},"sourceTemplateId":"workflow-library:controls-design","standards":["nist-800-53","iso-27001"],"teams":["operations","risk-management"]},"id":"wf:C4","mapUrl":"https://controlsmap.com/?v=1&node=wf%3AC4","slug":"controls-design","sourceIds":["coso-ic"],"sourceUrl":null,"title":"Control Design","type":"workflow"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:43475dfb7425d14278b1e6235a1f64da359783004e9a2836edb1f63b335f7555","properties":{},"sourceDetailPath":"/data/v1/records/wf-c4-4c0ca700.json","sourceId":"wf:C4","targetDetailPath":"/data/v1/records/uc-uc-access-15-84699cae.json","targetId":"uc:UC-ACCESS-15","type":"operates"}],"schemaVersion":1}