{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","contextIds":[],"directIds":["ctrl:iso-27001:A.5.1","ctrl:iso-27001:A.5.10","ctrl:iso-27001:A.5.11","ctrl:iso-27001:A.5.12","ctrl:iso-27001:A.5.13","ctrl:iso-27001:A.5.14","ctrl:iso-27001:A.5.15","ctrl:iso-27001:A.5.16","ctrl:iso-27001:A.5.17","ctrl:iso-27001:A.5.18","ctrl:iso-27001:A.5.19","ctrl:iso-27001:A.5.2","ctrl:iso-27001:A.5.20","ctrl:iso-27001:A.5.21","ctrl:iso-27001:A.5.22","ctrl:iso-27001:A.5.23","ctrl:iso-27001:A.5.24","ctrl:iso-27001:A.5.25","ctrl:iso-27001:A.5.26","ctrl:iso-27001:A.5.27","ctrl:iso-27001:A.5.28","ctrl:iso-27001:A.5.29","ctrl:iso-27001:A.5.3","ctrl:iso-27001:A.5.30","ctrl:iso-27001:A.5.31","ctrl:iso-27001:A.5.32","ctrl:iso-27001:A.5.33","ctrl:iso-27001:A.5.34","ctrl:iso-27001:A.5.35","ctrl:iso-27001:A.5.36","ctrl:iso-27001:A.5.37","ctrl:iso-27001:A.5.4","ctrl:iso-27001:A.5.5","ctrl:iso-27001:A.5.6","ctrl:iso-27001:A.5.7","ctrl:iso-27001:A.5.8","ctrl:iso-27001:A.5.9","ctrl:iso-27001:A.6.1","ctrl:iso-27001:A.6.2","ctrl:iso-27001:A.6.3"],"kind":"bundle","metadata":"/assets/agent_metadata.5c7612c9c5b0b455.json","name":"ISO/IEC 27001:2022","next":"/assets/agent_sources-iso-27001-2.8e643662a2f2df1b.json","page":1,"pageSize":40,"records":[{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Policies for information security","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.1","control_type":"preventive","domains":["Governance, Policy & Oversight"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-1-e30a466c.html","id":"ctrl:iso-27001:A.5.1","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.1","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.1 — Policies for information security","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-1-e30a466c.cf3a67f0e8315692.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Acceptable use of information and other associated assets","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.10","control_type":"preventive","domains":["Asset Management & Inventory"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-10-2d5f0877.html","id":"ctrl:iso-27001:A.5.10","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.10","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.10 — Acceptable use of information and other associated assets","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-10-2d5f0877.67fb64be930936a4.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Return of assets","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.11","control_type":"preventive","domains":["Asset Management & Inventory"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-11-07680424.html","id":"ctrl:iso-27001:A.5.11","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.11","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.11 — Return of assets","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-11-07680424.e29c61129efc0ae8.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Classification of information","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.12","control_type":"preventive","domains":["Asset Management & Inventory","Data Protection & Privacy"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-12-eb4887b2.html","id":"ctrl:iso-27001:A.5.12","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.12","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.12 — Classification of information","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-12-eb4887b2.f3a76354a77f1a7f.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Labelling of information","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.13","control_type":"preventive","domains":["Asset Management & Inventory","Data Protection & Privacy"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-13-b1e84751.html","id":"ctrl:iso-27001:A.5.13","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.13","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.13 — Labelling of information","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-13-b1e84751.a5267f95b7149451.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Information transfer","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.14","control_type":"preventive","domains":["Asset Management & Inventory","Network & Communications Security"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":1,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-14-c427daf1.html","id":"ctrl:iso-27001:A.5.14","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.14","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.14 — Information transfer","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-14-c427daf1.d7457a44e46ee804.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Access control","details":{"automation":"hybrid","control_category":"administrative","control_id":"A.5.15","control_type":"preventive","domains":["Access Control & Identity Management"],"framework":"iso-27001","group":"Organizational controls","key_control":true,"requirement_frequency":null,"requirement_status":null,"risk_count":7,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-15-b8587804.html","id":"ctrl:iso-27001:A.5.15","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.15","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.15 — Access control","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-15-b8587804.790e4f214625d89e.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Identity management","details":{"automation":"hybrid","control_category":"administrative","control_id":"A.5.16","control_type":"preventive","domains":["Access Control & Identity Management"],"framework":"iso-27001","group":"Organizational controls","key_control":true,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-16-46fc8420.html","id":"ctrl:iso-27001:A.5.16","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.16","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.16 — Identity management","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-16-46fc8420.2675ac3eda4cd50e.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Authentication information","details":{"automation":"hybrid","control_category":"administrative","control_id":"A.5.17","control_type":"preventive","domains":["Access Control & Identity Management"],"framework":"iso-27001","group":"Organizational controls","key_control":true,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-17-b45de021.html","id":"ctrl:iso-27001:A.5.17","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.17","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.17 — Authentication information","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-17-b45de021.883dd52c9a8ad6ee.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Access rights","details":{"automation":"hybrid","control_category":"administrative","control_id":"A.5.18","control_type":"preventive","domains":["Access Control & Identity Management"],"framework":"iso-27001","group":"Organizational controls","key_control":true,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-18-472ef6f1.html","id":"ctrl:iso-27001:A.5.18","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.18","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.18 — Access rights","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-18-472ef6f1.c3aebc6053284559.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Information security in supplier relationships","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.19","control_type":"preventive","domains":["Third-Party / Supply-Chain Risk"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":8,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-19-d8db0691.html","id":"ctrl:iso-27001:A.5.19","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.19","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.19 — Information security in supplier relationships","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-19-d8db0691.de7b110d8bf84811.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Information security roles and responsibilities","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.2","control_type":"preventive","domains":["Governance, Policy & Oversight"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-2-af788ae8.html","id":"ctrl:iso-27001:A.5.2","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.2","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.2 — Information security roles and responsibilities","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-2-af788ae8.dc46c9e12ec68d13.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Addressing information security within supplier agreements","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.20","control_type":"preventive","domains":["Human Resources / Personnel Security","Third-Party / Supply-Chain Risk"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-20-fcee3b34.html","id":"ctrl:iso-27001:A.5.20","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.20","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.20 — Addressing information security within supplier agreements","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-20-fcee3b34.076c27118b287da4.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Managing information security in the ICT supply chain","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.21","control_type":"preventive","domains":["Third-Party / Supply-Chain Risk"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-21-40b0d925.html","id":"ctrl:iso-27001:A.5.21","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.21","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.21 — Managing information security in the ICT supply chain","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-21-40b0d925.1a3dada72a599921.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"detective"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Monitoring, review and change management of supplier services","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.22","control_type":"detective","domains":["Third-Party / Supply-Chain Risk"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-22-bb292d09.html","id":"ctrl:iso-27001:A.5.22","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.22","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.22 — Monitoring, review and change management of supplier services","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-22-bb292d09.93c2f51c859bb64f.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Information security for use of cloud services","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.23","control_type":"preventive","domains":["Third-Party / Supply-Chain Risk"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-23-b73e5b7d.html","id":"ctrl:iso-27001:A.5.23","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.23","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.23 — Information security for use of cloud services","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-23-b73e5b7d.8d6531b3d5e3a459.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"corrective"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Information security incident management planning and preparation","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.24","control_type":"corrective","domains":["Incident Management & Response"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-24-904c429f.html","id":"ctrl:iso-27001:A.5.24","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.24","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.24 — Information security incident management planning and preparation","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-24-904c429f.8d39585cd153b458.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"detective"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Assessment and decision on information security events","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.25","control_type":"detective","domains":["Incident Management & Response"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-25-7dc7a20c.html","id":"ctrl:iso-27001:A.5.25","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.25","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.25 — Assessment and decision on information security events","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-25-7dc7a20c.52bc6e2b0f1530dc.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"corrective"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Response to information security incidents","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.26","control_type":"corrective","domains":["Incident Management & Response"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-26-863e832e.html","id":"ctrl:iso-27001:A.5.26","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.26","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.26 — Response to information security incidents","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-26-863e832e.4d7659d97c4996db.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"corrective"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Learning from information security incidents","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.27","control_type":"corrective","domains":["Incident Management & Response"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":1,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-27-df970c02.html","id":"ctrl:iso-27001:A.5.27","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.27","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.27 — Learning from information security incidents","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-27-df970c02.ee57fe9c5e3d8a1c.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"corrective"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Collection of evidence","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.28","control_type":"corrective","domains":["Incident Management & Response"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-28-e9d04483.html","id":"ctrl:iso-27001:A.5.28","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.28","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.28 — Collection of evidence","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-28-e9d04483.1cdfd3369d01b3d2.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"corrective"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Information security during disruption","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.29","control_type":"corrective","domains":["Business Continuity & Disaster Recovery"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-29-e6db7f58.html","id":"ctrl:iso-27001:A.5.29","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.29","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.29 — Information security during disruption","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-29-e6db7f58.f63f3674e6d4f33e.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Segregation of duties","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.3","control_type":"preventive","domains":["Financial Reporting Controls (SOX)","Governance, Policy & Oversight"],"framework":"iso-27001","group":"Organizational controls","key_control":true,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-3-2763eb2a.html","id":"ctrl:iso-27001:A.5.3","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.3","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.3 — Segregation of duties","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-3-2763eb2a.f8920e969a4d820f.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"corrective"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"ICT readiness for business continuity","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.30","control_type":"corrective","domains":["Business Continuity & Disaster Recovery"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-30-08880829.html","id":"ctrl:iso-27001:A.5.30","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.30","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.30 — ICT readiness for business continuity","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-30-08880829.25c6100e9bf5a4b0.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Legal, statutory, regulatory and contractual requirements","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.31","control_type":"preventive","domains":["Compliance, Audit & Assurance","Governance, Policy & Oversight"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-31-ed7ace76.html","id":"ctrl:iso-27001:A.5.31","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.31","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.31 — Legal, statutory, regulatory and contractual requirements","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-31-ed7ace76.551276cdbd21e003.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Intellectual property rights","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.32","control_type":"preventive","domains":["Compliance, Audit & Assurance"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":6,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-32-7342e3f4.html","id":"ctrl:iso-27001:A.5.32","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.32","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.32 — Intellectual property rights","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-32-7342e3f4.528c5cd3488b2ecc.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Protection of records","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.33","control_type":"preventive","domains":["Compliance, Audit & Assurance"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-33-2f7017d2.html","id":"ctrl:iso-27001:A.5.33","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.33","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.33 — Protection of records","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-33-2f7017d2.4b917e1525abbf5e.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Privacy and protection of personal identifiable information (PII)","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.34","control_type":"preventive","domains":["AI Governance","Compliance, Audit & Assurance","Data Protection & Privacy"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-34-58b0337f.html","id":"ctrl:iso-27001:A.5.34","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.34","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.34 — Privacy and protection of personal identifiable information (PII)","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-34-58b0337f.e45a5a6c7dded8d5.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"detective"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Independent review of information security","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.35","control_type":"detective","domains":["Compliance, Audit & Assurance"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-35-9b5c5f1a.html","id":"ctrl:iso-27001:A.5.35","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.35","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.35 — Independent review of information security","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-35-9b5c5f1a.5037c5f05645429a.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"detective"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Compliance with policies, rules and standards for information security","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.36","control_type":"detective","domains":["Compliance, Audit & Assurance","Governance, Policy & Oversight"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-36-669a705b.html","id":"ctrl:iso-27001:A.5.36","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.36","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.36 — Compliance with policies, rules and standards for information security","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-36-669a705b.1600deae9c8a6193.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Documented operating procedures","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.37","control_type":"preventive","domains":["Governance, Policy & Oversight"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-37-45e8c067.html","id":"ctrl:iso-27001:A.5.37","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.37","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.37 — Documented operating procedures","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-37-45e8c067.2c8b7a5cdb14edd1.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Management responsibilities","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.4","control_type":"preventive","domains":["Awareness & Training","Governance, Policy & Oversight"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-4-779338c6.html","id":"ctrl:iso-27001:A.5.4","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.4","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.4 — Management responsibilities","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-4-779338c6.c8c329d40cfa88d5.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Contact with authorities","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.5","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Asset Management & Inventory","Access Control & Identity Management","Third-Party / Supply-Chain Risk","Incident Management & Response","Business Continuity & Disaster Recovery","Compliance, Audit & Assurance","Data Protection & Privacy"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":1,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-5-bb8f068e.html","id":"ctrl:iso-27001:A.5.5","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.5","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.5 — Contact with authorities","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-5-bb8f068e.2e376062e18c5da9.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Contact with special interest groups","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.6","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Asset Management & Inventory","Access Control & Identity Management","Third-Party / Supply-Chain Risk","Incident Management & Response","Business Continuity & Disaster Recovery","Compliance, Audit & Assurance","Data Protection & Privacy"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":1,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-6-dcc736df.html","id":"ctrl:iso-27001:A.5.6","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.6","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.6 — Contact with special interest groups","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-6-dcc736df.060b01e4980eb929.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"detective"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Threat intelligence","details":{"automation":"hybrid","control_category":"administrative","control_id":"A.5.7","control_type":"detective","domains":["Risk Assessment & Management"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-7-0328fe6b.html","id":"ctrl:iso-27001:A.5.7","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.7","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.7 — Threat intelligence","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-7-0328fe6b.e1d8614948702701.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Information security in project management","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.8","control_type":"preventive","domains":["Risk Assessment & Management"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-8-bf8c2add.html","id":"ctrl:iso-27001:A.5.8","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.8","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.8 — Information security in project management","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-8-bf8c2add.a085d08362f33570.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Inventory of information and other associated assets","details":{"automation":"hybrid","control_category":"administrative","control_id":"A.5.9","control_type":"preventive","domains":["Asset Management & Inventory"],"framework":"iso-27001","group":"Organizational controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-5-9-64706ee7.html","id":"ctrl:iso-27001:A.5.9","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.5.9","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.5.9 — Inventory of information and other associated assets","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-5-9-64706ee7.4127a3f45cfb1299.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Screening","details":{"automation":"manual","control_category":"administrative","control_id":"A.6.1","control_type":"preventive","domains":["Human Resources / Personnel Security"],"framework":"iso-27001","group":"People controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-6-1-048c51f3.html","id":"ctrl:iso-27001:A.6.1","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.6.1","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.6.1 — Screening","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-6-1-048c51f3.2ae67f1f08f40a3a.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Terms and conditions of employment","details":{"automation":"manual","control_category":"administrative","control_id":"A.6.2","control_type":"preventive","domains":["Human Resources / Personnel Security"],"framework":"iso-27001","group":"People controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-6-2-89c7f287.html","id":"ctrl:iso-27001:A.6.2","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.6.2","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.6.2 — Terms and conditions of employment","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-6-2-89c7f287.c263e2a154ab9869.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Information security awareness, education and training","details":{"automation":"manual","control_category":"administrative","control_id":"A.6.3","control_type":"preventive","domains":["Awareness & Training"],"framework":"iso-27001","group":"People controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-27001-a-6-3-b9bb8fbd.html","id":"ctrl:iso-27001:A.6.3","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.6.3","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.6.3 — Information security awareness, education and training","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-6-3-b9bb8fbd.365b3922b77de0c9.json"}],"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:019baf1e5871be1ff90dc2f328e35b55b4739de44e3586df48bf0a46e89df917","properties":{"control_id":"A.5.37","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-14-f4f2c470.json","sourceId":"uc:UC-GOV-14","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-37-45e8c067.json","targetId":"ctrl:iso-27001:A.5.37","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:03c04772af38852c61bc45ced60807778313cd2b86db0fcbea885dea098335f6","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-21-40b0d925.json","sourceId":"ctrl:iso-27001:A.5.21","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0d4c62ecaae2f7303c04611942d2d3c0be48b1dbbbdc87b1c12837d9d00505c0","properties":{"control_id":"A.5.16","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-access-06-623f356c.json","sourceId":"uc:UC-ACCESS-06","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-16-46fc8420.json","targetId":"ctrl:iso-27001:A.5.16","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:125837fa57ffac78b2e9e962c9d8e11ca5fc8d0bffd212767c6b8ede1c62b007","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-18-472ef6f1.json","sourceId":"ctrl:iso-27001:A.5.18","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:13bb867480e3db9a8da0c823366b744fea3b4a2bc566f40475df615e74052b7e","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-35-9b5c5f1a.json","sourceId":"ctrl:iso-27001:A.5.35","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:208d89715d2babbc7c6b0cd41a2ff7f7d0f9f973ea4a7b367c1ade1ce6b935b9","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-27-df970c02.json","sourceId":"ctrl:iso-27001:A.5.27","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:238a45d8ea4f46ef5f4ceef5591956db44382d3276460b6165f8af6cac02f025","properties":{"control_id":"A.5.14","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"equal","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-asset-08-7413af1c.json","sourceId":"uc:UC-ASSET-08","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-14-c427daf1.json","targetId":"ctrl:iso-27001:A.5.14","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:24fac1046b37ebc9bdc5375cd7c40130fdd31d0f4733479e05795a6b2589d023","properties":{"control_id":"A.5.4","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-07-2a8998f7.json","sourceId":"uc:UC-GOV-07","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-4-779338c6.json","targetId":"ctrl:iso-27001:A.5.4","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:2610ff3ffaf075c384e5ec62194e94275f13d5b9a1bf4bae7a8c00297cb82266","properties":{"control_id":"A.5.31","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-03-9e248eb3.json","sourceId":"uc:UC-GOV-03","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-31-ed7ace76.json","targetId":"ctrl:iso-27001:A.5.31","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:27b6d243991a6ca4120f3985439b0a7f95e65f0f0851cf2c832c625f6b34c549","properties":{"control_id":"A.5.36","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-22-c0b503b4.json","sourceId":"uc:UC-GOV-22","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-36-669a705b.json","targetId":"ctrl:iso-27001:A.5.36","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:27dd5e945af28141d844fab51e3199d7c1f67cead03cf2660e5481fa101c8ec7","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-9-64706ee7.json","sourceId":"ctrl:iso-27001:A.5.9","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:2d3f198c0d10bf6a75acff9516befb1d4aebbaf82091a7889c8a800934f32a42","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-24-904c429f.json","sourceId":"ctrl:iso-27001:A.5.24","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3165ad3f02bcdb9746b97d6edcc165a99e985acca005200d7abf6cd12495da6a","properties":{"control_id":"A.5.13","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-asset-03-3e6216cd.json","sourceId":"uc:UC-ASSET-03","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-13-b1e84751.json","targetId":"ctrl:iso-27001:A.5.13","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:31b0cb3f6fd4cc5c3cacf66348964c70a77844f16d0c7a4935fdc668c74d1981","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-23-b73e5b7d.json","sourceId":"ctrl:iso-27001:A.5.23","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:36569c96d581a0f13c86b5cebcc2272b76c64149dd4942b9c22b3145bcbefe45","properties":{"control_id":"A.5.12","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-asset-03-3e6216cd.json","sourceId":"uc:UC-ASSET-03","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-12-eb4887b2.json","targetId":"ctrl:iso-27001:A.5.12","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3ae55ac16fb1ebb87ddbd35eb80328e21e2cc26fc229bdddaed372c3bf73679b","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-37-45e8c067.json","sourceId":"ctrl:iso-27001:A.5.37","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3cdceed58717a8955895a09f9613a3e23c9f0f9b2ca82d5699366641c3d670d2","properties":{"control_id":"A.5.11","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-asset-07-5039208b.json","sourceId":"uc:UC-ASSET-07","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-11-07680424.json","targetId":"ctrl:iso-27001:A.5.11","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3f1b9ea154938221b1defc204c43a177d21cac451064cf698d3df8848fb47b3f","properties":{"control_id":"A.5.20","coverage":"partial","delta":"broader supplier security terms addressed under third-party risk domain","framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-hr-05-4049a32e.json","sourceId":"uc:UC-HR-05","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-20-fcee3b34.json","targetId":"ctrl:iso-27001:A.5.20","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:46648e717e072a59209177109194a6565991e86901151a86d82d77414c30260a","properties":{"control_id":"A.5.2","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-06-f1eb1346.json","sourceId":"uc:UC-GOV-06","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-2-af788ae8.json","targetId":"ctrl:iso-27001:A.5.2","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:466a020d9155bf095f26f8dfdceec468959b77f8f152099748d1ae2efcd0adf4","properties":{"control_id":"A.6.2","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-hr-02-a54c8912.json","sourceId":"uc:UC-HR-02","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-6-2-89c7f287.json","targetId":"ctrl:iso-27001:A.6.2","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:48a2786331de25004c3646dcb752f1d3e31e543365d71397609e73ad194e3f56","properties":{"control_id":"A.5.3","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"equal","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-08-187d37c0.json","sourceId":"uc:UC-GOV-08","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-3-2763eb2a.json","targetId":"ctrl:iso-27001:A.5.3","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4b20e41bec7d4f4d8d7613344316f1c36b11efb9a68ae6b18216a95d1be1811b","properties":{"control_id":"A.5.21","coverage":"partial","delta":"propagation of security requirements through the ICT supply chain via contract control","framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-tprm-07-c98d7242.json","sourceId":"uc:UC-TPRM-07","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-21-40b0d925.json","targetId":"ctrl:iso-27001:A.5.21","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4c619442506fe595907cec0c29140d76d135eac51922f06e18251d204d100750","properties":{"control_id":"A.5.30","coverage":"partial","delta":"periodic ICT readiness testing satisfied by the testing control","framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-01-428f23d3.json","sourceId":"uc:UC-BCDR-01","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-30-08880829.json","targetId":"ctrl:iso-27001:A.5.30","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4d7f38c258495a76082e22f9523b4b80ddc1f72f3d737dc66980a67bb415cca7","properties":{"control_id":"A.5.34","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-data-13-c09befaf.json","sourceId":"uc:UC-DATA-13","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-34-58b0337f.json","targetId":"ctrl:iso-27001:A.5.34","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4fb345c8a13c4a03d17fcac5b4171db0eae0827fa052ba295ca9e52459c9ce6e","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-6-dcc736df.json","sourceId":"ctrl:iso-27001:A.5.6","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:5c53e3ef5ffe35c02856e1c1802a7402bb5ce33a9851322c24a7c8d1e6c921f8","properties":{"control_id":"A.5.5","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-23-e22e7c62.json","sourceId":"uc:UC-GOV-23","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-5-bb8f068e.json","targetId":"ctrl:iso-27001:A.5.5","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:5ecf5bcf967e019bef5193b7e980eb189cb34370cb6a2e5626ddf5ac8bd5fad8","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-1-e30a466c.json","sourceId":"ctrl:iso-27001:A.5.1","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:5f4cfb105780887905e7b4b98a5de22d67cd758cfc4002a0f4e9f0804f8d2951","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-34-58b0337f.json","sourceId":"ctrl:iso-27001:A.5.34","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:60288c7b615dd45071fe47c6f5941bd0186a54666ec26aa84d96505dc1e37e13","properties":{"control_id":"A.5.24","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-ir-01-e7711d29.json","sourceId":"uc:UC-IR-01","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-24-904c429f.json","targetId":"ctrl:iso-27001:A.5.24","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:60f2083b85eec41e5629c01567e3bc03ebc043b72a575f38df3d7bd42caa9029","properties":{"control_id":"A.5.26","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-ir-06-0b166c2a.json","sourceId":"uc:UC-IR-06","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-26-863e832e.json","targetId":"ctrl:iso-27001:A.5.26","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:6211dca87613b36dc26a16c224980c7d5e044c31c777bf4c86c9880d1a51ee8e","properties":{"control_id":"A.5.10","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-asset-06-d13d9c7f.json","sourceId":"uc:UC-ASSET-06","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-10-2d5f0877.json","targetId":"ctrl:iso-27001:A.5.10","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:6245560e88a0b25a51c060ec56866eed4994290ee0d92752753fc75bd841b7e1","properties":{"control_id":"A.5.32","coverage":"partial","delta":"operational IPR safeguards - license/asset registers with usage-vs-entitlement enforcement, proof-of-license retention, and acquisition from authorized sources - beyond registering and periodically evaluating the obligation","framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-24-fa96fe18.json","sourceId":"uc:UC-AUDIT-24","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-32-7342e3f4.json","targetId":"ctrl:iso-27001:A.5.32","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:6252394509c8c804491c1fe1521212654ee25ae53402cf5d638e32cf5bbce973","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-19-d8db0691.json","sourceId":"ctrl:iso-27001:A.5.19","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:6a6ee7bb71598007c95021c955a96b2c1acda401441d403b7218ab5f3411adcb","properties":{"control_id":"A.6.1","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-hr-01-c7e14dc5.json","sourceId":"uc:UC-HR-01","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-6-1-048c51f3.json","targetId":"ctrl:iso-27001:A.6.1","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:6cd84798e905847e4af7974212aca5ac6b13a2458f611342d5d25dac426d73e0","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-14-c427daf1.json","sourceId":"ctrl:iso-27001:A.5.14","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:6dfc51b072e9d2be100b104ae0c8f5d70a1d798283038bd3cafa55c414f7a8de","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-31-ed7ace76.json","sourceId":"ctrl:iso-27001:A.5.31","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:6e78e0481feaa67b20a386a2793b8dd288b60bbe92bf3303d2f27e141417dca7","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-6-1-048c51f3.json","sourceId":"ctrl:iso-27001:A.6.1","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7135470f5a63fc7121113c02de833d6fde647eb75c6bb98fd804caa7badca929","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-7-0328fe6b.json","sourceId":"ctrl:iso-27001:A.5.7","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:722eea1a1ab065dd7d746f5a7eb92824852c58225ce56526eb1f17767b3eb932","properties":{"control_id":"A.5.6","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-23-e22e7c62.json","sourceId":"uc:UC-GOV-23","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-6-dcc736df.json","targetId":"ctrl:iso-27001:A.5.6","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7373d57591824458194e96497f8a2b6c6ae3fe9bd3cf3df2640217f46ee2c232","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-8-bf8c2add.json","sourceId":"ctrl:iso-27001:A.5.8","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7566c86da6687604708ae8825c0fd65a28909fb3e0c43ea698aedff05673ebe4","properties":{"control_id":"A.5.25","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-ir-04-6067c069.json","sourceId":"uc:UC-IR-04","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-25-7dc7a20c.json","targetId":"ctrl:iso-27001:A.5.25","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7be827f3f5f3b5ec04d16ec812c4240d136e0301d0b63eca8450857a1eed7d00","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-13-b1e84751.json","sourceId":"ctrl:iso-27001:A.5.13","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7c4757cbea8a44d57e05fb416fa000732b28c508b262641ae99493be0ed4c882","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-11-07680424.json","sourceId":"ctrl:iso-27001:A.5.11","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7d0d09710154ed4f5da4e3e1469f1da59724795dd902f32fb4c810b59af8449d","properties":{"control_id":"A.5.33","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-25-e23c8618.json","sourceId":"uc:UC-AUDIT-25","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-33-2f7017d2.json","targetId":"ctrl:iso-27001:A.5.33","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7def629af2e63fd82808e5330d7a6291c876c04b5d6a94c9439d1d9e8229b592","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-10-2d5f0877.json","sourceId":"ctrl:iso-27001:A.5.10","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:8221f136a9ace6ed0a2f0c37f8a0cad91739ebebc3c72a2699a62e9c9b1f7877","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-33-2f7017d2.json","sourceId":"ctrl:iso-27001:A.5.33","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:82c40a552cf2e27f24846e459e9b2a1e347e530e140706bfaaa950dca104839a","properties":{"control_id":"A.5.19","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-tprm-01-16b62053.json","sourceId":"uc:UC-TPRM-01","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-19-d8db0691.json","targetId":"ctrl:iso-27001:A.5.19","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:831bb87ed52b4b8496a2df0763736f691983d642227954b2a9794574ad122e52","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-15-b8587804.json","sourceId":"ctrl:iso-27001:A.5.15","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:864b97133dc86c0f2253703e0c993cca4244168aca39b91663776379305caf25","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-6-2-89c7f287.json","sourceId":"ctrl:iso-27001:A.6.2","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:89206e47cbd4bf028123c0d6072f24d0408b695ea872f1bf5bc128ad8cd1c09c","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-17-b45de021.json","sourceId":"ctrl:iso-27001:A.5.17","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:8924d29b1c62b03926542f6e3877260c21d06450f2ff3ea29626fed327bfb6f6","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-30-08880829.json","sourceId":"ctrl:iso-27001:A.5.30","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:8ad43eeb9707d403a42533306a14908e951226d382dfc555c22e8baefaf7633b","properties":{"control_id":"A.5.17","coverage":"partial","delta":"advising personnel on proper handling and protection of authentication information","framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-access-08-7c9dc13e.json","sourceId":"uc:UC-ACCESS-08","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-17-b45de021.json","targetId":"ctrl:iso-27001:A.5.17","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:8cf6a557412855d991f5fbe276861808067d53cad6d0a3017419b255fa47e568","properties":{"control_id":"A.5.15","coverage":"partial","delta":"also requires rules controlling physical access to information and assets","framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-access-03-43eeb212.json","sourceId":"uc:UC-ACCESS-03","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-15-b8587804.json","targetId":"ctrl:iso-27001:A.5.15","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:8ff93d7e4e334d9453ecbad99b8cd3527f3de070de51c8adc3daad60b069d2b6","properties":{"control_id":"A.6.3","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-train-01-5f513831.json","sourceId":"uc:UC-TRAIN-01","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-6-3-b9bb8fbd.json","targetId":"ctrl:iso-27001:A.6.3","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:9a1ac393b5ffa6c111074f18af41181d192062e7ee4f735c450051e58b8df60c","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-4-779338c6.json","sourceId":"ctrl:iso-27001:A.5.4","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:9da2566dd4bcec9ec28079e30f249b4e4191c02c2bba10760bf3e22b7202af97","properties":{"control_id":"A.5.27","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-ir-10-072c0403.json","sourceId":"uc:UC-IR-10","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-27-df970c02.json","targetId":"ctrl:iso-27001:A.5.27","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a09570a6185e464a33d447ed7e365813f9ec4e119b3b996bb917758789fe6d6c","properties":{"control_id":"A.5.8","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-risk-02-0f8519bb.json","sourceId":"uc:UC-RISK-02","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-8-bf8c2add.json","targetId":"ctrl:iso-27001:A.5.8","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a4c26665256fb8b683e42d6fddf701ba8402c798e480743cd68a6777bb166de3","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-22-bb292d09.json","sourceId":"ctrl:iso-27001:A.5.22","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a663d636ace716e1441d87cd25897840f98c0c489bea339a8e1d75115860ac39","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-6-3-b9bb8fbd.json","sourceId":"ctrl:iso-27001:A.6.3","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a73ec3cd22801fc393e49ceaaaebeb68441349a625535ea5f13c226d0ef9b5ea","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-32-7342e3f4.json","sourceId":"ctrl:iso-27001:A.5.32","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a9b533c5feb720d182be5676e842a2d8a2fd6dcaf1579044c2de0159fa3af1a8","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-2-af788ae8.json","sourceId":"ctrl:iso-27001:A.5.2","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b16d94a2172ca8f0cd1a12637021852d2064f9132dd64f4ad2453c881c7973b1","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-26-863e832e.json","sourceId":"ctrl:iso-27001:A.5.26","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b2e15eeb0ac5f83bb68af516e5314a9cb224d33ccdde9514a89d4b0fdb9a8636","properties":{"control_id":"A.5.23","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-tprm-08-6de49908.json","sourceId":"uc:UC-TPRM-08","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-23-b73e5b7d.json","targetId":"ctrl:iso-27001:A.5.23","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b90a977fb7864a79cdfd6ab05743a9481c56c59a201dc0f329c6b18b42e92fce","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-5-bb8f068e.json","sourceId":"ctrl:iso-27001:A.5.5","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b940f5bf271a9d6de9658e893188d3ac32bb20c8bac0d0a125a8a1ace62fea9d","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-36-669a705b.json","sourceId":"ctrl:iso-27001:A.5.36","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c3e2e4095692ac831fe61e17f631e6439562fa229cca872fb0423ed8b6e53842","properties":{"control_id":"A.5.35","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-23-124d94d5.json","sourceId":"uc:UC-AUDIT-23","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-35-9b5c5f1a.json","targetId":"ctrl:iso-27001:A.5.35","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c530cc1fc512c2a65966b3618d10b34c3e8e6c8d48b0b90f66500505f8fac21e","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-28-e9d04483.json","sourceId":"ctrl:iso-27001:A.5.28","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:cc7313b060d10c4c04874add409edc21af22d32d714ace5d89dc262a08288601","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-3-2763eb2a.json","sourceId":"ctrl:iso-27001:A.5.3","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:cef3659c19b299952916eb1c72046246e40f0deee302865659cc3f0729e3018d","properties":{"control_id":"A.5.18","coverage":"partial","delta":"provisioning, adjustment, and revocation satisfied by the account lifecycle control","framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-access-02-0132e278.json","sourceId":"uc:UC-ACCESS-02","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-18-472ef6f1.json","targetId":"ctrl:iso-27001:A.5.18","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d16f10ed1a0c7529a9cb3f843113b2246df77c34d6c0e5cdc78c5c436dd87122","properties":{"control_id":"A.5.7","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-risk-17-4ea73b39.json","sourceId":"uc:UC-RISK-17","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-7-0328fe6b.json","targetId":"ctrl:iso-27001:A.5.7","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d339e5a33703ddad17fd5c96450d2811a5fe1041841048ee938ee15e9f51f524","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-20-fcee3b34.json","sourceId":"ctrl:iso-27001:A.5.20","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d5dca93df6c9f5e530850413d15cfae38b5b043a13806a8d64c2bcb79f49bcf8","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-25-7dc7a20c.json","sourceId":"ctrl:iso-27001:A.5.25","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d9e6e946442603aaa9b6e365c4fb9d605c4c50779bdc4c1096c55f30636bd335","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-12-eb4887b2.json","sourceId":"ctrl:iso-27001:A.5.12","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e115412b6dbd6e8acfd6e03c6f5a8f3d855469e2439b614314f3c5731fa7e439","properties":{"control_id":"A.5.9","coverage":"partial","delta":"inventorying information (data) assets themselves, addressed by the data-inventory control","framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-asset-01-04dbd5db.json","sourceId":"uc:UC-ASSET-01","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-9-64706ee7.json","targetId":"ctrl:iso-27001:A.5.9","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e73f053f2b7dcf4dace73dbe38de6cd7a98f53a536143ca373b870fa12085773","properties":{"control_id":"A.5.1","coverage":"partial","delta":"Policies must also be acknowledged by relevant personnel and interested parties","framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-14-f4f2c470.json","sourceId":"uc:UC-GOV-14","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-1-e30a466c.json","targetId":"ctrl:iso-27001:A.5.1","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f0c83635efeba62d090fe35f8b2986eb6385b02b17fd74179801aaf67ac7f465","properties":{"control_id":"A.5.28","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-ir-07-b4d61eff.json","sourceId":"uc:UC-IR-07","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-28-e9d04483.json","targetId":"ctrl:iso-27001:A.5.28","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f2dc4ec8b339793b1bff17301c96cd06c5e9a52ec5e53e22202d4a3ea2c5932c","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-16-46fc8420.json","sourceId":"ctrl:iso-27001:A.5.16","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f8611c3a55644212e48bf360d4c2a232964e53b4e26a9d51bb92b53b3cee9daf","properties":{"control_id":"A.5.29","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-01-428f23d3.json","sourceId":"uc:UC-BCDR-01","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-29-e6db7f58.json","targetId":"ctrl:iso-27001:A.5.29","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:faaa84666a0a8ed0d3fcc11ce04b8b4ec70c8e96aae124692bdf43e95c3b7273","properties":{"control_id":"A.5.22","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-tprm-04-e6aef252.json","sourceId":"uc:UC-TPRM-04","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-22-bb292d09.json","targetId":"ctrl:iso-27001:A.5.22","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:fb60df474bd25dd7bb113762fde8f6b535a89ace97bad9f668f8f5d820620d3e","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-5-29-e6db7f58.json","sourceId":"ctrl:iso-27001:A.5.29","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"}],"schemaVersion":1,"scope":"sources","total":380}