{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","download":{"releaseId":"sha256:552a35d2fabdfd04f46b566e106b4bccaca279a4e3155caf4d281b04b8db71b4","slug":"reg-impact-analysis-obligation-mapping","url":"/assets/agent_workflow-reg-impact-analysis-obligation-mapping-f81d1f2e.ac7b04cd1e9b2a73.json"},"kind":"record","record":{"attributes":{"department":"compliance-legal","domain":"reg","lineOfDefense":"monitor"},"canonicalUrl":"https://workflow-library.com/all/?w=reg-impact-analysis-obligation-mapping","description":"Regulatory Impact Analysis & Obligation Mapping runs on a compliance Audit engagement record — an Audit item created per triggering instrument (audit_type=compliance) whose scope holds the locked scope statement and to which every gap Issue, risk acceptance, and the workflow instance attach. It consumes two upstream inputs: the triage handoff package from Regulatory Horizon Scanning & Triage (instrument, canonical citation, publication and effective dates, triage disposition) and the canonical instrument text itself — the Official Journal or regulator-register version, the authoritative source the whole analysis cites. It parses that instrument into obligations, maps them to the existing Policy and Control library, classifies and rates gaps, and reconciles the obligation register. Named deliverables: the cited regulatory impact note, the obligation inventory, the authority-to-policy crosswalk, the classified and rated gap Issues, the versioned obligation register, and the final evidence and decision package. In scope: obligation analysis, crosswalk, gap classification, exposure rating, and register reconciliation for the in-scope entities, products, and jurisdictions. Out of scope: remediation build-out (handed off to Regulatory Obligation Implementation) and re-prioritizing the instrument (owned by Regulatory Horizon Scanning & Triage). Confirmed gaps and their action plans hand off to Regulatory Obligation Implementation.","details":{"canonicalUrl":"https://workflow-library.com/all/?w=reg-impact-analysis-obligation-mapping","capabilities":[],"controls":["UC-GOV-03","UC-AUDIT-24","UC-RISK-11","UC-RISK-14"],"domains":["reg"],"lineOfDefense":"monitor","mappingStatus":"mapped","releaseId":"sha256:552a35d2fabdfd04f46b566e106b4bccaca279a4e3155caf4d281b04b8db71b4","roleIntegrity":{"activityCount":0,"ermPhases":[],"lineRoles":[],"serviceModes":[],"warnings":[]},"sourceTemplateId":"workflow-library:reg-impact-analysis-obligation-mapping","standards":["gdpr","dora","nydfs-500","eu-ai-act","nis2","pci-dss","hipaa","ccpa"],"teams":["compliance-legal"]},"id":"wf:R4","mapUrl":"https://controlsmap.com/?v=1&node=wf%3AR4","slug":"reg-impact-analysis-obligation-mapping","sourceIds":["cobit-2019","coso-erm","coso-ic","iso-27001","iso-31000","nist-800-53","nist-csf-2","nydfs-500","soc2"],"sourceUrl":null,"title":"Regulatory Impact Analysis & Obligation Mapping","type":"workflow"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7545a153e7b2924ea13b3266bac6a795517c437de9106dfc2f08ce29a21217bb","properties":{},"sourceDetailPath":"/data/v1/records/wf-r4-097c6fc4.json","sourceId":"wf:R4","targetDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","targetId":"uc:UC-RISK-14","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:820ca2aee235804d678aaff7458dd2c47cb8ffdecc49bb6952f5a92c664a3dcc","properties":{},"sourceDetailPath":"/data/v1/records/wf-r4-097c6fc4.json","sourceId":"wf:R4","targetDetailPath":"/data/v1/records/uc-uc-gov-03-9e248eb3.json","targetId":"uc:UC-GOV-03","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:987fcce26b6c52285e55cfebe60d060829208eb00c36446c6a988c9f8fdd0b3b","properties":{},"sourceDetailPath":"/data/v1/records/wf-r4-097c6fc4.json","sourceId":"wf:R4","targetDetailPath":"/data/v1/records/uc-uc-risk-11-3f5d23ea.json","targetId":"uc:UC-RISK-11","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:bf002489ae975bdd6ba44ee23c5210a373c9e1fd74ca8ae486aefdd943e4a7cc","properties":{},"sourceDetailPath":"/data/v1/records/wf-r4-097c6fc4.json","sourceId":"wf:R4","targetDetailPath":"/data/v1/records/uc-uc-audit-24-fa96fe18.json","targetId":"uc:UC-AUDIT-24","type":"oversees"}],"schemaVersion":1}