{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","download":{"releaseId":"sha256:eaebf4d5b6fbbc31ce2e6cc4908a6af39aeb6d2a3e5494135f364962e96fd19a","slug":"sox-itgc-testing","url":"/assets/agent_workflow-sox-itgc-testing-3d4945bb.f5d5d3d069c053b4.json"},"kind":"record","record":{"attributes":{"department":"internal-audit","domain":"sox","lineOfDefense":"assure"},"canonicalUrl":"https://workflow-library.com/all/?w=sox-itgc-testing","description":"SOX ITGC Testing as a modular, decision-aware workflow. It runs on the existing Audit engagement item for this ITGC cycle (audit_type: sox_testing, period_start/period_end = the test period) — enrich that item, never create a duplicate — while per-control operating-effectiveness results live on Control-hosted SOX testing workflows, one created per in-scope ITGC control per Workflow.customFields.sox.fiscalYear, each hosted directly on the Control under test. It consumes the ICFR scoping handoff package from Annual ICFR Scoping & Risk Assessment, produces the reperformable final ITGC testing package as its named deliverable, and hands the deficiencies off to SOX Deficiency Remediation. In scope: the operating-effectiveness conclusion on the ITGCs protecting in-scope financial systems, reached by referencing the controls-owned NIST 800-53 catalog and its test scripts — not by rebuilding procedures. Out of scope, owned by related workflows: scoping of significant accounts and applications (Annual ICFR Scoping & Risk Assessment), deep completeness-and-accuracy validation of system-generated populations (SOX IPE Validation), and remediation of what fails (SOX Deficiency Remediation, the downstream handoff). It can stand alone, but is designed to exchange handoff packages with these related workflows instead of duplicating repeated work.","details":{"canonicalUrl":"https://workflow-library.com/all/?w=sox-itgc-testing","capabilities":[],"controls":["UC-AUDIT-21","UC-ACCESS-01","UC-ACCESS-02","UC-ACCESS-04","UC-CONFIG-02","UC-ACCESS-17","UC-ACCESS-05","UC-ACCESS-16","UC-ASSET-12","UC-BCDR-12","UC-CONFIG-03","UC-BCDR-03","UC-GOV-08","UC-SDLC-06","UC-SDLC-07"],"domains":["sox"],"lineOfDefense":"assure","mappingStatus":"mapped","releaseId":"sha256:eaebf4d5b6fbbc31ce2e6cc4908a6af39aeb6d2a3e5494135f364962e96fd19a","roleIntegrity":{"activityCount":0,"ermPhases":[],"lineRoles":[],"serviceModes":[],"warnings":[]},"sourceTemplateId":"workflow-library:sox-itgc-testing","standards":["sox","nist-800-53"],"teams":["internal-audit","it","finance"]},"id":"wf:S5","mapUrl":"https://controlsmap.com/?v=1&node=wf%3AS5","slug":"sox-itgc-testing","sourceIds":["aiuc-1","cobit-2019","coso-ic","gdpr","hipaa","iso-27001","nist-800-53","nist-ai-agent-identity","nist-csf-2","nydfs-500","soc1","soc2","sox"],"sourceUrl":null,"title":"SOX ITGC Testing","type":"workflow"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0f374f1dc9fdeae659f22970357c4bd662dc0fa6889311736e78b412636b49d4","properties":{},"sourceDetailPath":"/data/v1/records/wf-s5-a655abf2.json","sourceId":"wf:S5","targetDetailPath":"/data/v1/records/uc-uc-bcdr-12-0d9cc358.json","targetId":"uc:UC-BCDR-12","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0fbdffb79e264e3c215481a02c618b0442126bf5a3fcb0876224454abf22821f","properties":{},"sourceDetailPath":"/data/v1/records/wf-s5-a655abf2.json","sourceId":"wf:S5","targetDetailPath":"/data/v1/records/uc-uc-config-03-3a08a2b1.json","targetId":"uc:UC-CONFIG-03","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0ff2451d36e3939962c71357d8594c655f54985e68f12ad50207fd9f1b01edc1","properties":{},"sourceDetailPath":"/data/v1/records/wf-s5-a655abf2.json","sourceId":"wf:S5","targetDetailPath":"/data/v1/records/uc-uc-access-17-c9ecd00d.json","targetId":"uc:UC-ACCESS-17","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:174fc3d890c086bdd045c5fff2832d7a8e0ffa43fc9503b71b1d79ce9b3c3124","properties":{},"sourceDetailPath":"/data/v1/records/wf-s5-a655abf2.json","sourceId":"wf:S5","targetDetailPath":"/data/v1/records/uc-uc-config-02-175d55b0.json","targetId":"uc:UC-CONFIG-02","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:1b947dff5a7c9025905fade8e4a6022238d1e8c16d5b447bdad8525e498a7a44","properties":{},"sourceDetailPath":"/data/v1/records/wf-s5-a655abf2.json","sourceId":"wf:S5","targetDetailPath":"/data/v1/records/uc-uc-sdlc-06-c1afc713.json","targetId":"uc:UC-SDLC-06","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:25412b47f2a84385de376b835925da1e26b05d03f3c28397d0bc2174f69c787d","properties":{},"sourceDetailPath":"/data/v1/records/wf-s5-a655abf2.json","sourceId":"wf:S5","targetDetailPath":"/data/v1/records/uc-uc-bcdr-03-d30f4ccf.json","targetId":"uc:UC-BCDR-03","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3327640719d1b96d034a350d7aa59ec095723c35aface189c0344e6e951644e2","properties":{},"sourceDetailPath":"/data/v1/records/wf-s5-a655abf2.json","sourceId":"wf:S5","targetDetailPath":"/data/v1/records/uc-uc-access-16-7a8d6d65.json","targetId":"uc:UC-ACCESS-16","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:43998ab4fc7638a98adcfd08a4c9378fcfa8a4bcf3cd920046fd6f4ced6c77a7","properties":{},"sourceDetailPath":"/data/v1/records/wf-s5-a655abf2.json","sourceId":"wf:S5","targetDetailPath":"/data/v1/records/uc-uc-access-01-1e70b922.json","targetId":"uc:UC-ACCESS-01","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:48c5ab76c552ffb3c3af7e7af4b3885b089211bce363d67082eff189a9952df9","properties":{},"sourceDetailPath":"/data/v1/records/wf-s5-a655abf2.json","sourceId":"wf:S5","targetDetailPath":"/data/v1/records/uc-uc-gov-08-187d37c0.json","targetId":"uc:UC-GOV-08","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7150b152c28010ef88cc72ea38a7b9d3645c2ca01ccc07f126c94861b540b9c3","properties":{},"sourceDetailPath":"/data/v1/records/wf-s5-a655abf2.json","sourceId":"wf:S5","targetDetailPath":"/data/v1/records/uc-uc-audit-21-6406caa4.json","targetId":"uc:UC-AUDIT-21","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:8b4b03a26304624231578c0efd9e92d8efab1bb6c93a3d6de746f5354726cbba","properties":{},"sourceDetailPath":"/data/v1/records/wf-s5-a655abf2.json","sourceId":"wf:S5","targetDetailPath":"/data/v1/records/uc-uc-asset-12-32fbbd73.json","targetId":"uc:UC-ASSET-12","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:8b7df9e268bfb9a2ad5ed38e17c432bc743734e278d4411ef8b095a9e244aef9","properties":{},"sourceDetailPath":"/data/v1/records/wf-s5-a655abf2.json","sourceId":"wf:S5","targetDetailPath":"/data/v1/records/uc-uc-access-05-9b7f3e34.json","targetId":"uc:UC-ACCESS-05","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d4492bcc76bea14bccca8d8f3666df953feaf22fdf03b93bfd2bb3a0f35ad4b7","properties":{},"sourceDetailPath":"/data/v1/records/wf-s5-a655abf2.json","sourceId":"wf:S5","targetDetailPath":"/data/v1/records/uc-uc-access-04-75180489.json","targetId":"uc:UC-ACCESS-04","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d630fed7655b5c34149589e7162c5a187e7a68afd7000dae2a2dbb13cbc59b8e","properties":{},"sourceDetailPath":"/data/v1/records/wf-s5-a655abf2.json","sourceId":"wf:S5","targetDetailPath":"/data/v1/records/uc-uc-access-02-0132e278.json","targetId":"uc:UC-ACCESS-02","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:eb6788d6960de6d8961af645a8f1e3b138fb9c8dff5eeab9926f9359797e7faa","properties":{},"sourceDetailPath":"/data/v1/records/wf-s5-a655abf2.json","sourceId":"wf:S5","targetDetailPath":"/data/v1/records/uc-uc-sdlc-07-22470d8b.json","targetId":"uc:UC-SDLC-07","type":"tests"}],"schemaVersion":1}