{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","download":{"releaseId":"sha256:998fa0fa624dc515ce92355a407983ccc609a84b1a5d73bfdd40f6d63f6db11f","slug":"sox-scoping-decision","url":"/assets/agent_workflow-sox-scoping-decision-85aca4a1.b6189b9407a56b81.json"},"kind":"record","record":{"attributes":{"department":"finance","domain":"sox","lineOfDefense":"monitor"},"canonicalUrl":"https://workflow-library.com/all/?w=sox-scoping-decision","description":"Runs on the existing Process item for the one business process under decision — it enriches that Process item and the Control and Risk items in its RCM, never creating a duplicate. Determine whether the process is SOX-relevant and, if so, scope its key controls — otherwise document the exclusion. Consumes the Annual ICFR Scoping & Risk Assessment handoff package (accepted materiality set, scoping thresholds, aggregation floor). Named deliverables: the assessment worksheet, the SOX-relevance determination memo, the resulting Risk & Control Matrix (RCM) scope (Control and Risk items with live links), and the exclusion memo — compiled into a signed scoping decision package. Hands that signed package off to the downstream SOX Process Walkthrough for the in-scope slice, or routes a full exclusion into the annual monitoring/refresh cycle. Out of scope: entity-level materiality, significant accounts, and fraud-risk assessment, which are owned by the upstream Annual ICFR Scoping & Risk Assessment, and process understanding and control verification, which are owned by the downstream SOX Process Walkthrough.","details":{"canonicalUrl":"https://workflow-library.com/all/?w=sox-scoping-decision","capabilities":[],"controls":["UC-RISK-08","UC-RISK-11"],"domains":["sox"],"lineOfDefense":"monitor","mappingStatus":"mapped","releaseId":"sha256:998fa0fa624dc515ce92355a407983ccc609a84b1a5d73bfdd40f6d63f6db11f","roleIntegrity":{"activityCount":0,"ermPhases":[],"lineRoles":[],"serviceModes":[],"warnings":[]},"sourceTemplateId":"workflow-library:sox-scoping-decision","standards":["sox","coso-ic"],"teams":["finance"]},"id":"wf:S7","mapUrl":"https://controlsmap.com/?v=1&node=wf%3AS7","slug":"sox-scoping-decision","sourceIds":["coso-erm","coso-ic","iso-31000","nist-csf-2","soc2"],"sourceUrl":null,"title":"SOX Scoping Decision","type":"workflow"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:6b4a66550e01e8e2854f3b3d4aa96fa61b43572582716db62677d15e06e61337","properties":{},"sourceDetailPath":"/data/v1/records/wf-s7-e8f6281e.json","sourceId":"wf:S7","targetDetailPath":"/data/v1/records/uc-uc-risk-11-3f5d23ea.json","targetId":"uc:UC-RISK-11","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:edeb696283039988ca14dffd4519c388d538d13cd2db6fa544fd79ba4b6c2b3b","properties":{},"sourceDetailPath":"/data/v1/records/wf-s7-e8f6281e.json","sourceId":"wf:S7","targetDetailPath":"/data/v1/records/uc-uc-risk-08-5f27bebc.json","targetId":"uc:UC-RISK-08","type":"oversees"}],"schemaVersion":1}