{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","download":{"releaseId":"sha256:d9186ad1dc8351f49127ab6e35603aab14ffd8eae0f6994ca6e3b52ac74bd3d1","slug":"grc-system-third-party-risk-review","url":"/assets/agent_workflow-grc-system-third-party-risk-review-3e6a28b9.508e0ccad9571c3f.json"},"kind":"record","record":{"attributes":{"department":"risk-management","domain":"grc","lineOfDefense":"monitor"},"canonicalUrl":"https://workflow-library.com/all/?w=grc-system-third-party-risk-review","description":"Runs on the existing system item. Review system and provider dependencies, assess current risk and control evidence, select response actions, and approve the review record. Deliver the reviewed result and open actions to the responsible register owner and the named companion procedure.","details":{"canonicalUrl":"https://workflow-library.com/all/?w=grc-system-third-party-risk-review","capabilities":["system-third-party-risk-review"],"controls":["UC-RISK-18","UC-CONFIG-10","UC-TPRM-02","UC-TPRM-04","UC-TPRM-08"],"domains":["grc"],"lineOfDefense":"monitor","mappingStatus":"mapped","releaseId":"sha256:d9186ad1dc8351f49127ab6e35603aab14ffd8eae0f6994ca6e3b52ac74bd3d1","roleIntegrity":{"activityCount":0,"ermPhases":[],"lineRoles":[],"serviceModes":[],"warnings":[]},"sourceTemplateId":"workflow-library:grc-system-third-party-risk-review","standards":["iso-27001","nist-800-53","soc2"],"teams":["risk-management","it","procurement"]},"id":"wf:D55","mapUrl":"https://controlsmap.com/?v=1&node=wf%3AD55","slug":"grc-system-third-party-risk-review","sourceIds":["aiuc-1","iso-27001","nist-800-53","nist-csf-2","soc2"],"sourceUrl":null,"title":"System and Third-Party Risk Review","type":"workflow"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:43d7e062ec9a2b5e6cde1456bd143ba1ee5580574be59a579604864e20cafc85","properties":{},"sourceDetailPath":"/data/v1/records/wf-d55-248b03a5.json","sourceId":"wf:D55","targetDetailPath":"/data/v1/records/uc-uc-tprm-02-c35b26eb.json","targetId":"uc:UC-TPRM-02","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:656ac62569a0bb48ad16dfeedf7baf6154882714af6ad0539f9a6cdb2613fc40","properties":{},"sourceDetailPath":"/data/v1/records/wf-d55-248b03a5.json","sourceId":"wf:D55","targetDetailPath":"/data/v1/records/uc-uc-tprm-04-e6aef252.json","targetId":"uc:UC-TPRM-04","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7343a8f2d902c6be8f8b8a101f0ecbe48bc9218fb14d40824311bf617cf79997","properties":{},"sourceDetailPath":"/data/v1/records/wf-d55-248b03a5.json","sourceId":"wf:D55","targetDetailPath":"/data/v1/records/uc-uc-tprm-08-6de49908.json","targetId":"uc:UC-TPRM-08","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ab32e2107522b3034bdf9db923f37f6e55d8bc6453012ec5d5f642b6d9561cf2","properties":{},"sourceDetailPath":"/data/v1/records/wf-d55-248b03a5.json","sourceId":"wf:D55","targetDetailPath":"/data/v1/records/uc-uc-risk-18-23752e70.json","targetId":"uc:UC-RISK-18","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:dea7699380c1dafca18784059ac4d3587cbcf7b1a11953320aea6345e2334f98","properties":{},"sourceDetailPath":"/data/v1/records/wf-d55-248b03a5.json","sourceId":"wf:D55","targetDetailPath":"/data/v1/records/uc-uc-config-10-921518b8.json","targetId":"uc:UC-CONFIG-10","type":"operates"}],"schemaVersion":1}