{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","download":{"releaseId":"sha256:76943fa4fdeeb5deb71fbefc885cc9ef49c56ea1487e95d3fa44d89f1c8b0bd4","slug":"sox-subcertification-cascade","url":"/assets/agent_workflow-sox-subcertification-cascade-ca8091df.aa9586e32d748204.json"},"kind":"record","record":{"attributes":{"department":"finance","domain":"sox","lineOfDefense":"operate"},"canonicalUrl":"https://workflow-library.com/all/?w=sox-subcertification-cascade","description":"Quarterly 302/906 sub-certification as a modular, decision-aware workflow: it maintains the certifier hierarchy, refreshes the questionnaire for new systems, reorgs, known control issues, and pending deficiencies, launches the tiered cascade, tracks completion and cures gaps at the cutoff, triages exceptions and qualifications with escalation to the disclosure committee where material, summarizes the population for principal-officer 302/906 sign-off, and archives the certification evidence with the period's support. The instance runs against a campaign-record Audit item created for the quarter (audit_type: compliance; period_start/period_end = the quarter; scope = the in-scope entity and process population), enriching that one record — every questionnaire form, certification register, decision form, dashboard, and attestation package hangs off it and the run's own instance is the audit trail. It consumes the in-scope Process items (each carrying its process_owner) and the open deficiency Issue log, originates on its own recurring quarterly cadence with no upstream handoff, and hands its deficiencies downstream as linked Issue items into the SOX Deficiency Remediation, Year-End Deficiency Aggregation & Severity Evaluation, and Quarterly Board & Audit-Committee GRC Reporting workflows. In scope: the quarter's in-scope entities and processes per the current consolidation scope, from process-owner sub-certification through principal-officer 302/906 sign-off and archival, back-planned from the SEC filing date. Out of scope: the officers' external SEC filing mechanics, and the deficiency, year-end aggregation, and board reporting handled by the downstream SOX Deficiency Remediation, Year-End Deficiency Aggregation & Severity Evaluation, and Quarterly Board & Audit-Committee GRC Reporting workflows this cascade routes into.","details":{"canonicalUrl":"https://workflow-library.com/all/?w=sox-subcertification-cascade","capabilities":[],"controls":["UC-GOV-07","UC-GOV-21"],"domains":["sox"],"lineOfDefense":"operate","mappingStatus":"mapped","releaseId":"sha256:76943fa4fdeeb5deb71fbefc885cc9ef49c56ea1487e95d3fa44d89f1c8b0bd4","roleIntegrity":{"activityCount":0,"ermPhases":[],"lineRoles":[],"serviceModes":[],"warnings":[]},"sourceTemplateId":"workflow-library:sox-subcertification-cascade","standards":["sox","coso-ic"],"teams":["finance","executive"]},"id":"wf:S17","mapUrl":"https://controlsmap.com/?v=1&node=wf%3AS17","slug":"sox-subcertification-cascade","sourceIds":["cobit-2019","coso-erm","coso-ic","iso-27001","nist-800-53","soc2"],"sourceUrl":null,"title":"Quarterly 302/906 Sub-Certification Cascade","type":"workflow"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7591b3c7fb660817b9ea56a62830033063a656a60c3d15f87674d06b3b09daaf","properties":{},"sourceDetailPath":"/data/v1/records/wf-s17-e5271161.json","sourceId":"wf:S17","targetDetailPath":"/data/v1/records/uc-uc-gov-07-2a8998f7.json","targetId":"uc:UC-GOV-07","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c9d76ee4fe4efbd3a64021b6b54d269a9a0d5065ee98d870608912652f9d006a","properties":{},"sourceDetailPath":"/data/v1/records/wf-s17-e5271161.json","sourceId":"wf:S17","targetDetailPath":"/data/v1/records/uc-uc-gov-21-8c5d79f9.json","targetId":"uc:UC-GOV-21","type":"operates"}],"schemaVersion":1}