{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","download":{"releaseId":"sha256:10127d5f20ad531fc57130095f92fb97dcdcf60abc15a77096891474c8966351","slug":"grc-it-governance-cobit-review","url":"/assets/agent_workflow-grc-it-governance-cobit-review-32f5fcf6.6a8359df8e0d5675.json"},"kind":"record","record":{"attributes":{"department":"executive","domain":"grc","lineOfDefense":"monitor"},"canonicalUrl":"https://workflow-library.com/all/?w=grc-it-governance-cobit-review","description":"Periodic review of selected COBIT 2019 governance and management objectives, run per cycle on an Audit item (audit_type: it_audit; scope = the in-scope objectives; period_start/period_end = the assessment cycle) that the workflow instance attaches to and archives at close. Each in-scope COBIT objective is a Process item (process_type: it_general_control) linked to that Audit, and the review produces named deliverables against it: an evidence register and pre-scored capability sheet, a signed capability profile, a gap table with the benchmark decision, a committed improvement roadmap of Issue initiatives, and the governance board report and dashboard. In scope: the COBIT 2019 objectives selected for this cycle, each with a justified 0-5 target capability level, a named accountable owner, and the review cadence; out of scope: objectives explicitly excluded with recorded rationale. Self-originating: its scope sheet and target profile are supplied as workflow inputs, and it hands off to no distinct downstream workflow — the carry-forward improvement Issues and the archived instance seed its own next cycle.","details":{"canonicalUrl":"https://workflow-library.com/all/?w=grc-it-governance-cobit-review","capabilities":[],"controls":["UC-GOV-01","UC-AUDIT-22","UC-RISK-14","UC-BCDR-05","UC-GOV-10","UC-GOV-11","UC-GOV-12","UC-GOV-13","UC-GOV-20","UC-SDLC-02","UC-SDLC-08","UC-SDLC-09","UC-SDLC-12","UC-SDLC-13"],"domains":["grc"],"lineOfDefense":"monitor","mappingStatus":"mapped","releaseId":"sha256:10127d5f20ad531fc57130095f92fb97dcdcf60abc15a77096891474c8966351","roleIntegrity":{"activityCount":0,"ermPhases":[],"lineRoles":[],"serviceModes":[],"warnings":[]},"sourceTemplateId":"workflow-library:grc-it-governance-cobit-review","standards":["cobit-2019","coso-ic"],"teams":["executive","it"]},"id":"wf:G15","mapUrl":"https://controlsmap.com/?v=1&node=wf%3AG15","slug":"grc-it-governance-cobit-review","sourceIds":["cobit-2019","coso-erm","coso-ic","nist-800-53","nist-csf-2","nydfs-500","soc2"],"sourceUrl":null,"title":"IT Governance Objective Review (COBIT)","type":"workflow"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:14b747aadffe9d559e9e1b472f7bf2dbe5d828cc342588591d64cb19c660b319","properties":{},"sourceDetailPath":"/data/v1/records/wf-g15-1231bc14.json","sourceId":"wf:G15","targetDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","targetId":"uc:UC-RISK-14","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:203ec3d51f83a7b22bb436ebb80c6c5581440dc1956756357ea11bb5e66c3388","properties":{},"sourceDetailPath":"/data/v1/records/wf-g15-1231bc14.json","sourceId":"wf:G15","targetDetailPath":"/data/v1/records/uc-uc-bcdr-05-f73361f2.json","targetId":"uc:UC-BCDR-05","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3bcba55be937b73296b194335845ea0ffbbe47b500ac214d1e452d946e1e7299","properties":{},"sourceDetailPath":"/data/v1/records/wf-g15-1231bc14.json","sourceId":"wf:G15","targetDetailPath":"/data/v1/records/uc-uc-gov-12-5c560a78.json","targetId":"uc:UC-GOV-12","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:5e9a6524a9fdd426c6ff52a1f0ec205ea072ccb2c447191c65b9438ec5f4fe70","properties":{},"sourceDetailPath":"/data/v1/records/wf-g15-1231bc14.json","sourceId":"wf:G15","targetDetailPath":"/data/v1/records/uc-uc-sdlc-02-c3b003c2.json","targetId":"uc:UC-SDLC-02","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:70e8b1ff122ed56a1a5498fdb3d292ba20b110d653d70e01ca7fd0e17dce9e52","properties":{},"sourceDetailPath":"/data/v1/records/wf-g15-1231bc14.json","sourceId":"wf:G15","targetDetailPath":"/data/v1/records/uc-uc-sdlc-09-659d0280.json","targetId":"uc:UC-SDLC-09","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:82c2b6d38de4a2a6f287d61024a12d35b34826c48429a1733a87c3db68d89694","properties":{},"sourceDetailPath":"/data/v1/records/wf-g15-1231bc14.json","sourceId":"wf:G15","targetDetailPath":"/data/v1/records/uc-uc-sdlc-12-08ce2fc7.json","targetId":"uc:UC-SDLC-12","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:95411e382f95e1666a8bd94b19498add935f7f8b33ce6a795ddcccd5ddd9b40e","properties":{},"sourceDetailPath":"/data/v1/records/wf-g15-1231bc14.json","sourceId":"wf:G15","targetDetailPath":"/data/v1/records/uc-uc-gov-01-e1e2136d.json","targetId":"uc:UC-GOV-01","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:9ed268154c3e1e9b95878c46dee9cd2a5c6ef18eb9cab16697b2eaaa56da9970","properties":{},"sourceDetailPath":"/data/v1/records/wf-g15-1231bc14.json","sourceId":"wf:G15","targetDetailPath":"/data/v1/records/uc-uc-gov-13-81b348eb.json","targetId":"uc:UC-GOV-13","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a0741a6452fe9307ac08545e582683c143e39747a4867875f2a42bccc5abc134","properties":{},"sourceDetailPath":"/data/v1/records/wf-g15-1231bc14.json","sourceId":"wf:G15","targetDetailPath":"/data/v1/records/uc-uc-gov-11-a13b60d3.json","targetId":"uc:UC-GOV-11","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b337975978453c0f90127d4221d1ea3995f4a5b6a7674cff726bfd60df294280","properties":{},"sourceDetailPath":"/data/v1/records/wf-g15-1231bc14.json","sourceId":"wf:G15","targetDetailPath":"/data/v1/records/uc-uc-sdlc-13-ae800997.json","targetId":"uc:UC-SDLC-13","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b603542f3ae416b72f46e901540d3878678cf32b7a61f142a595aca2bec1b590","properties":{},"sourceDetailPath":"/data/v1/records/wf-g15-1231bc14.json","sourceId":"wf:G15","targetDetailPath":"/data/v1/records/uc-uc-audit-22-2a70149b.json","targetId":"uc:UC-AUDIT-22","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c033626a1b82f4af0681d403cf5d2ccefbd7fafb8e526874edd81139f47a0ed2","properties":{},"sourceDetailPath":"/data/v1/records/wf-g15-1231bc14.json","sourceId":"wf:G15","targetDetailPath":"/data/v1/records/uc-uc-gov-10-016614d1.json","targetId":"uc:UC-GOV-10","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c75548801cd3ac6f6824f2f036533ac12bdb17340cf7d620d5cdfa37a3420cc9","properties":{},"sourceDetailPath":"/data/v1/records/wf-g15-1231bc14.json","sourceId":"wf:G15","targetDetailPath":"/data/v1/records/uc-uc-sdlc-08-29ce69df.json","targetId":"uc:UC-SDLC-08","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:fbecb4c86da919629b08afe9f03e295de74c3a8bb4c945eed5b019891e038209","properties":{},"sourceDetailPath":"/data/v1/records/wf-g15-1231bc14.json","sourceId":"wf:G15","targetDetailPath":"/data/v1/records/uc-uc-gov-20-4a468c1a.json","targetId":"uc:UC-GOV-20","type":"oversees"}],"schemaVersion":1}