{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","download":{"releaseId":"sha256:356c43deb1a22a13525cc411a881fc72d7a28eff0443a514ded9c6c5444bd201","slug":"controls-identity-assurance-review","url":"/assets/agent_workflow-controls-identity-assurance-review-5cce867c.54978c5d28c0807c.json"},"kind":"record","record":{"attributes":{"department":"it","domain":"controls","lineOfDefense":"monitor"},"canonicalUrl":"https://workflow-library.com/all/?w=controls-identity-assurance-review","description":"This review runs on an Audit engagement item created for the review cycle (audit_type: it_audit; scope: the identity assurance boundary) — the workflow instance attaches to that Audit, and the five in-scope UC-ACCESS Control items (UC-ACCESS-07/08/09/11/12) link to it. It is self-originating: no upstream workflow feeds it — it starts from the review trigger, the governing controls, and the collected evidence. Review the IAL, AAL, and FAL assurance requirements against the current identity proofing, authentication, and federation controls for the in-scope systems, then remediate, document, and hand off open gaps. It produces the target-level register, the current-state control inventory, the scored gap register, the per-control assurance determination memo, and the compiled assurance review package; each open gap is recorded as an Issue (POA&M) item linked to its UC-ACCESS Control and the anchor Audit. In scope: NIST SP 800-63 identity assurance levels for the systems named in the locked workplan. Out of scope: broader access provisioning, joiner-mover-leaver lifecycle, and privileged-access certification. Hands off the assurance determination and any open POA&M items to the Security Control Assessment and POA&M Remediation workflow.","details":{"canonicalUrl":"https://workflow-library.com/all/?w=controls-identity-assurance-review","capabilities":[],"controls":["UC-ACCESS-07","UC-ACCESS-08","UC-ACCESS-09","UC-ACCESS-11","UC-ACCESS-12"],"domains":["controls"],"lineOfDefense":"monitor","mappingStatus":"mapped","releaseId":"sha256:356c43deb1a22a13525cc411a881fc72d7a28eff0443a514ded9c6c5444bd201","roleIntegrity":{"activityCount":0,"ermPhases":[],"lineRoles":[],"serviceModes":[],"warnings":[]},"sourceTemplateId":"workflow-library:controls-identity-assurance-review","standards":["nist-800-53"],"teams":["it"]},"id":"wf:C5","mapUrl":"https://controlsmap.com/?v=1&node=wf%3AC5","slug":"controls-identity-assurance-review","sourceIds":["hipaa","iso-27001","nist-800-53","nist-ai-agent-identity","nist-csf-2","nydfs-500","pci-dss"],"sourceUrl":null,"title":"Identity Assurance Review","type":"workflow"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:1c3eb929924f65eb0da5779c3c4a25573b839f3df4c378f9352812dac8c94e4a","properties":{},"sourceDetailPath":"/data/v1/records/wf-c5-907af9a4.json","sourceId":"wf:C5","targetDetailPath":"/data/v1/records/uc-uc-access-12-8ef9e477.json","targetId":"uc:UC-ACCESS-12","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:48619bb857eda4400475e1c83a40aee34ee34eb4411f46f912af642fe324dec2","properties":{},"sourceDetailPath":"/data/v1/records/wf-c5-907af9a4.json","sourceId":"wf:C5","targetDetailPath":"/data/v1/records/uc-uc-access-09-444baafe.json","targetId":"uc:UC-ACCESS-09","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:5ca871fd3bc257d41a984d7cf3db606ec23575270303f89754a85a07fb36eba3","properties":{},"sourceDetailPath":"/data/v1/records/wf-c5-907af9a4.json","sourceId":"wf:C5","targetDetailPath":"/data/v1/records/uc-uc-access-11-d0c7a1b8.json","targetId":"uc:UC-ACCESS-11","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7d52bf5b651919bf4b677c80c37922bb13874332c4942fa9689c6222ef3044cd","properties":{},"sourceDetailPath":"/data/v1/records/wf-c5-907af9a4.json","sourceId":"wf:C5","targetDetailPath":"/data/v1/records/uc-uc-access-08-7c9dc13e.json","targetId":"uc:UC-ACCESS-08","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:87220acd20692ae410fc685a8b661e2719c00970f977855c5961fcfc730fc066","properties":{},"sourceDetailPath":"/data/v1/records/wf-c5-907af9a4.json","sourceId":"wf:C5","targetDetailPath":"/data/v1/records/uc-uc-access-07-ed06e251.json","targetId":"uc:UC-ACCESS-07","type":"oversees"}],"schemaVersion":1}