{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","contextIds":["risk:ai-accountability-liability","risk:ai-adversarial-poisoning-attacks"],"directIds":["ctrl:iso-42001:A.10.2","ctrl:iso-42001:A.10.3","ctrl:iso-42001:A.10.4","ctrl:iso-42001:A.2.2","ctrl:iso-42001:A.2.3","ctrl:iso-42001:A.2.4","ctrl:iso-42001:A.3.2","ctrl:iso-42001:A.3.3","ctrl:iso-42001:A.4.2","ctrl:iso-42001:A.4.3","ctrl:iso-42001:A.4.4","ctrl:iso-42001:A.4.5","ctrl:iso-42001:A.4.6","ctrl:iso-42001:A.5.2","ctrl:iso-42001:A.5.3","ctrl:iso-42001:A.5.4","ctrl:iso-42001:A.5.5","ctrl:iso-42001:A.6.1.2","ctrl:iso-42001:A.6.1.3","ctrl:iso-42001:A.6.2.2","ctrl:iso-42001:A.6.2.3","ctrl:iso-42001:A.6.2.4","ctrl:iso-42001:A.6.2.5","ctrl:iso-42001:A.6.2.6","ctrl:iso-42001:A.6.2.7","ctrl:iso-42001:A.6.2.8","ctrl:iso-42001:A.7.2","ctrl:iso-42001:A.7.3","ctrl:iso-42001:A.7.4","ctrl:iso-42001:A.7.5","ctrl:iso-42001:A.7.6","ctrl:iso-42001:A.8.2","ctrl:iso-42001:A.8.3","ctrl:iso-42001:A.8.4","ctrl:iso-42001:A.8.5","ctrl:iso-42001:A.9.2","ctrl:iso-42001:A.9.3","ctrl:iso-42001:A.9.4"],"kind":"bundle","metadata":"/assets/agent_metadata.5c7612c9c5b0b455.json","name":"ISO/IEC 42001:2023 (AI)","next":"/assets/agent_sources-iso-42001-2.b31a7918a985ad85.json","page":1,"pageSize":40,"records":[{"attributes":{"category":"administrative","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"Allocating responsibilities","details":{"automation":"manual","control_category":"administrative","control_id":"A.10.2","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"Third-party and customer relationships","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-10-2-8a417a99.html","id":"ctrl:iso-42001:A.10.2","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.10.2","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.10.2 — Allocating responsibilities","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-10-2-8a417a99.5b4b0f16bc44eb2a.json"},{"attributes":{"category":"administrative","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"Suppliers","details":{"automation":"manual","control_category":"administrative","control_id":"A.10.3","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"Third-party and customer relationships","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-10-3-ab692346.html","id":"ctrl:iso-42001:A.10.3","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.10.3","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.10.3 — Suppliers","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-10-3-ab692346.359573e1a9e4e0fa.json"},{"attributes":{"category":"administrative","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"Customers","details":{"automation":"manual","control_category":"administrative","control_id":"A.10.4","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"Third-party and customer relationships","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-10-4-fb62881c.html","id":"ctrl:iso-42001:A.10.4","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.10.4","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.10.4 — Customers","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-10-4-fb62881c.6fd27589e537b742.json"},{"attributes":{"category":"administrative","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"AI policy","details":{"automation":"manual","control_category":"administrative","control_id":"A.2.2","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"Policies related to AI","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-2-2-dbf7432d.html","id":"ctrl:iso-42001:A.2.2","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.2.2","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.2.2 — AI policy","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-2-2-dbf7432d.e868f8edf351a45d.json"},{"attributes":{"category":"administrative","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"Alignment with other organizational policies","details":{"automation":"manual","control_category":"administrative","control_id":"A.2.3","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"Policies related to AI","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-2-3-b0138cc0.html","id":"ctrl:iso-42001:A.2.3","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.2.3","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.2.3 — Alignment with other organizational policies","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-2-3-b0138cc0.3696ef875b89af83.json"},{"attributes":{"category":"administrative","framework":"iso-42001","type":"detective"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"Review of the AI policy","details":{"automation":"manual","control_category":"administrative","control_id":"A.2.4","control_type":"detective","domains":["AI Governance"],"framework":"iso-42001","group":"Policies related to AI","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-2-4-59052a56.html","id":"ctrl:iso-42001:A.2.4","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.2.4","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.2.4 — Review of the AI policy","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-2-4-59052a56.75d3782162a43344.json"},{"attributes":{"category":"administrative","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"AI roles and responsibilities","details":{"automation":"manual","control_category":"administrative","control_id":"A.3.2","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"Internal organization","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-3-2-604cbc1c.html","id":"ctrl:iso-42001:A.3.2","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.3.2","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.3.2 — AI roles and responsibilities","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-3-2-604cbc1c.b65ab942ad53c5ae.json"},{"attributes":{"category":"administrative","framework":"iso-42001","type":"detective"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"Reporting of concerns","details":{"automation":"manual","control_category":"administrative","control_id":"A.3.3","control_type":"detective","domains":["AI Governance"],"framework":"iso-42001","group":"Internal organization","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-3-3-f62d2077.html","id":"ctrl:iso-42001:A.3.3","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.3.3","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.3.3 — Reporting of concerns","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-3-3-f62d2077.aa94ae844f0a707f.json"},{"attributes":{"category":"administrative","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"Resource documentation","details":{"automation":"manual","control_category":"administrative","control_id":"A.4.2","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"Resources for AI systems","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-4-2-83440407.html","id":"ctrl:iso-42001:A.4.2","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.4.2","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.4.2 — Resource documentation","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-4-2-83440407.0aab65c4f24fd8f2.json"},{"attributes":{"category":"technical","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"Data resources","details":{"automation":"manual","control_category":"technical","control_id":"A.4.3","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"Resources for AI systems","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-4-3-d786b798.html","id":"ctrl:iso-42001:A.4.3","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.4.3","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.4.3 — Data resources","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-4-3-d786b798.7b16a97dc5bc5c68.json"},{"attributes":{"category":"technical","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"Tooling resources","details":{"automation":"manual","control_category":"technical","control_id":"A.4.4","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"Resources for AI systems","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-4-4-d5789378.html","id":"ctrl:iso-42001:A.4.4","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.4.4","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.4.4 — Tooling resources","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-4-4-d5789378.9ab0edfad081400b.json"},{"attributes":{"category":"technical","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"System and computing resources","details":{"automation":"manual","control_category":"technical","control_id":"A.4.5","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"Resources for AI systems","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-4-5-80e0e06c.html","id":"ctrl:iso-42001:A.4.5","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.4.5","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.4.5 — System and computing resources","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-4-5-80e0e06c.8ff1ac67e18f4464.json"},{"attributes":{"category":"administrative","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"Human resources","details":{"automation":"manual","control_category":"administrative","control_id":"A.4.6","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"Resources for AI systems","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-4-6-579bb92f.html","id":"ctrl:iso-42001:A.4.6","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.4.6","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.4.6 — Human resources","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-4-6-579bb92f.26d927029a3715a1.json"},{"attributes":{"category":"administrative","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"AI system impact assessment process","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.2","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"Assessing impacts of AI systems","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":8,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-5-2-421bdcd4.html","id":"ctrl:iso-42001:A.5.2","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.5.2","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.5.2 — AI system impact assessment process","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-5-2-421bdcd4.7f2a6e99f15284cd.json"},{"attributes":{"category":"administrative","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"Documentation of AI system impact assessments","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.3","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"Assessing impacts of AI systems","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":8,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-5-3-5192e9d2.html","id":"ctrl:iso-42001:A.5.3","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.5.3","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.5.3 — Documentation of AI system impact assessments","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-5-3-5192e9d2.46e9bbe850d38a1f.json"},{"attributes":{"category":"administrative","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"Assessing AI system impact on individuals or groups of individuals","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.4","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"Assessing impacts of AI systems","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":8,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-5-4-4ae08368.html","id":"ctrl:iso-42001:A.5.4","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.5.4","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.5.4 — Assessing AI system impact on individuals or groups of individuals","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-5-4-4ae08368.341c7b605d10d0b4.json"},{"attributes":{"category":"administrative","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"Assessing societal impacts of AI systems","details":{"automation":"manual","control_category":"administrative","control_id":"A.5.5","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"Assessing impacts of AI systems","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":8,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-5-5-35172fd6.html","id":"ctrl:iso-42001:A.5.5","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.5.5","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.5.5 — Assessing societal impacts of AI systems","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-5-5-35172fd6.bf59682a7796cbfa.json"},{"attributes":{"category":"technical","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"Objectives for responsible development of AI systems","details":{"automation":"manual","control_category":"technical","control_id":"A.6.1.2","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"AI system life cycle","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-6-1-2-4f8248f1.html","id":"ctrl:iso-42001:A.6.1.2","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.6.1.2","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.6.1.2 — Objectives for responsible development of AI systems","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-6-1-2-4f8248f1.7fd79cf6b53e06d4.json"},{"attributes":{"category":"technical","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"Processes for responsible AI system design and development","details":{"automation":"manual","control_category":"technical","control_id":"A.6.1.3","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"AI system life cycle","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-6-1-3-2f72aa38.html","id":"ctrl:iso-42001:A.6.1.3","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.6.1.3","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.6.1.3 — Processes for responsible AI system design and development","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-6-1-3-2f72aa38.87b8aecefb1746b2.json"},{"attributes":{"category":"technical","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"AI system requirements and specification","details":{"automation":"manual","control_category":"technical","control_id":"A.6.2.2","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"AI system life cycle","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-6-2-2-20339c32.html","id":"ctrl:iso-42001:A.6.2.2","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.6.2.2","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.6.2.2 — AI system requirements and specification","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-6-2-2-20339c32.05fc159ee29b2964.json"},{"attributes":{"category":"technical","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"Documentation of AI system design and development","details":{"automation":"manual","control_category":"technical","control_id":"A.6.2.3","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"AI system life cycle","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-6-2-3-252ad2fb.html","id":"ctrl:iso-42001:A.6.2.3","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.6.2.3","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.6.2.3 — Documentation of AI system design and development","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-6-2-3-252ad2fb.b883dcf037f9e4fb.json"},{"attributes":{"category":"technical","framework":"iso-42001","type":"detective"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"AI system verification and validation","details":{"automation":"hybrid","control_category":"technical","control_id":"A.6.2.4","control_type":"detective","domains":["AI Governance"],"framework":"iso-42001","group":"AI system life cycle","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":6,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-6-2-4-7da7f3ec.html","id":"ctrl:iso-42001:A.6.2.4","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.6.2.4","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.6.2.4 — AI system verification and validation","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-6-2-4-7da7f3ec.41bc8fb23c9c0973.json"},{"attributes":{"category":"technical","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"AI system deployment","details":{"automation":"hybrid","control_category":"technical","control_id":"A.6.2.5","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"AI system life cycle","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":6,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-6-2-5-fd797576.html","id":"ctrl:iso-42001:A.6.2.5","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.6.2.5","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.6.2.5 — AI system deployment","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-6-2-5-fd797576.339e7934a05de225.json"},{"attributes":{"category":"technical","framework":"iso-42001","type":"detective"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"AI system operation and monitoring","details":{"automation":"hybrid","control_category":"technical","control_id":"A.6.2.6","control_type":"detective","domains":["AI Governance"],"framework":"iso-42001","group":"AI system life cycle","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":6,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-6-2-6-efbed6b5.html","id":"ctrl:iso-42001:A.6.2.6","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.6.2.6","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.6.2.6 — AI system operation and monitoring","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-6-2-6-efbed6b5.b9ab3ebd8bc4d955.json"},{"attributes":{"category":"technical","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"AI system technical documentation","details":{"automation":"manual","control_category":"technical","control_id":"A.6.2.7","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"AI system life cycle","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-6-2-7-763177a5.html","id":"ctrl:iso-42001:A.6.2.7","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.6.2.7","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.6.2.7 — AI system technical documentation","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-6-2-7-763177a5.97fa73581ff8d14d.json"},{"attributes":{"category":"technical","framework":"iso-42001","type":"detective"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"AI system recording of event logs","details":{"automation":"automated","control_category":"technical","control_id":"A.6.2.8","control_type":"detective","domains":["AI Governance"],"framework":"iso-42001","group":"AI system life cycle","key_control":true,"requirement_frequency":null,"requirement_status":null,"risk_count":6,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-6-2-8-209d5e42.html","id":"ctrl:iso-42001:A.6.2.8","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.6.2.8","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.6.2.8 — AI system recording of event logs","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-6-2-8-209d5e42.2c9ff1a62617cdf9.json"},{"attributes":{"category":"technical","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"Data for development and enhancement of AI systems","details":{"automation":"manual","control_category":"technical","control_id":"A.7.2","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"Data for AI systems","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":8,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-7-2-29a30b42.html","id":"ctrl:iso-42001:A.7.2","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.7.2","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.7.2 — Data for development and enhancement of AI systems","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-7-2-29a30b42.2f970c33600f5318.json"},{"attributes":{"category":"administrative","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"Acquisition of data","details":{"automation":"manual","control_category":"administrative","control_id":"A.7.3","control_type":"preventive","domains":["AI Governance","Data Protection & Privacy"],"framework":"iso-42001","group":"Data for AI systems","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":8,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-7-3-a48a0852.html","id":"ctrl:iso-42001:A.7.3","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.7.3","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.7.3 — Acquisition of data","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-7-3-a48a0852.b4824b1c3a29b944.json"},{"attributes":{"category":"technical","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"Data quality for AI systems","details":{"automation":"hybrid","control_category":"technical","control_id":"A.7.4","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"Data for AI systems","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":8,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-7-4-bbfc048a.html","id":"ctrl:iso-42001:A.7.4","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.7.4","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.7.4 — Data quality for AI systems","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-7-4-bbfc048a.a3af74543594a6d4.json"},{"attributes":{"category":"technical","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"Data provenance","details":{"automation":"manual","control_category":"technical","control_id":"A.7.5","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"Data for AI systems","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":8,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-7-5-ec3c2a85.html","id":"ctrl:iso-42001:A.7.5","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.7.5","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.7.5 — Data provenance","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-7-5-ec3c2a85.d0995eb12976aa3a.json"},{"attributes":{"category":"technical","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"Data preparation","details":{"automation":"manual","control_category":"technical","control_id":"A.7.6","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"Data for AI systems","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":8,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-7-6-49d0eb8c.html","id":"ctrl:iso-42001:A.7.6","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.7.6","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.7.6 — Data preparation","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-7-6-49d0eb8c.68950b28e891c26f.json"},{"attributes":{"category":"administrative","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"System documentation and information for users","details":{"automation":"manual","control_category":"administrative","control_id":"A.8.2","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"Information for interested parties of AI systems","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":6,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-8-2-5f2aec8b.html","id":"ctrl:iso-42001:A.8.2","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.8.2","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.8.2 — System documentation and information for users","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-8-2-5f2aec8b.be71b078621a6d74.json"},{"attributes":{"category":"administrative","framework":"iso-42001","type":"detective"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"External reporting","details":{"automation":"manual","control_category":"administrative","control_id":"A.8.3","control_type":"detective","domains":["AI Governance"],"framework":"iso-42001","group":"Information for interested parties of AI systems","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-8-3-6b72ad8e.html","id":"ctrl:iso-42001:A.8.3","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.8.3","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.8.3 — External reporting","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-8-3-6b72ad8e.4a4d1aefbb9817a0.json"},{"attributes":{"category":"administrative","framework":"iso-42001","type":"corrective"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"Communication of incidents","details":{"automation":"manual","control_category":"administrative","control_id":"A.8.4","control_type":"corrective","domains":["AI Governance"],"framework":"iso-42001","group":"Information for interested parties of AI systems","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-8-4-1adaf7d2.html","id":"ctrl:iso-42001:A.8.4","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.8.4","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.8.4 — Communication of incidents","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-8-4-1adaf7d2.da694c0fd33ede8f.json"},{"attributes":{"category":"administrative","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"Information for interested parties","details":{"automation":"manual","control_category":"administrative","control_id":"A.8.5","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"Information for interested parties of AI systems","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":6,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-8-5-7147cdf4.html","id":"ctrl:iso-42001:A.8.5","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.8.5","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.8.5 — Information for interested parties","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-8-5-7147cdf4.9413fb463c52a8b6.json"},{"attributes":{"category":"administrative","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"Processes for responsible use of AI systems","details":{"automation":"manual","control_category":"administrative","control_id":"A.9.2","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"Use of AI systems","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":7,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-9-2-2550f9b7.html","id":"ctrl:iso-42001:A.9.2","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.9.2","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.9.2 — Processes for responsible use of AI systems","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-9-2-2550f9b7.bdf4ccfeb97c4250.json"},{"attributes":{"category":"administrative","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"Objectives for responsible use of AI systems","details":{"automation":"manual","control_category":"administrative","control_id":"A.9.3","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"Use of AI systems","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":7,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-9-3-49fe9ffd.html","id":"ctrl:iso-42001:A.9.3","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.9.3","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.9.3 — Objectives for responsible use of AI systems","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-9-3-49fe9ffd.1fbd9767aa363fcd.json"},{"attributes":{"category":"administrative","framework":"iso-42001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-42001/","description":"Intended use of the AI system","details":{"automation":"manual","control_category":"administrative","control_id":"A.9.4","control_type":"preventive","domains":["AI Governance"],"framework":"iso-42001","group":"Use of AI systems","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":7,"source_pages":null,"source_url":null},"direct":true,"htmlUrl":"/agents/records/ctrl-iso-42001-a-9-4-8a78e94e.html","id":"ctrl:iso-42001:A.9.4","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-42001%3AA.9.4","sourceIds":["iso-42001"],"sourceUrl":null,"title":"A.9.4 — Intended use of the AI system","type":"control","url":"/assets/agent_record-ctrl-iso-42001-a-9-4-8a78e94e.60e87fae97a2102a.json"},{"attributes":{"category":"ai_governance","domain":["AI Governance","Governance, Policy & Oversight","Compliance, Audit & Assurance"],"inherent_rating":"high","taxonomy":["nist-ai-rmf-risk","iso-23894-ai-risk"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-accountability-liability","description":"Ambiguous responsibility across developers, deployers, and operators means no party is clearly accountable when AI causes harm; organizations face reputational damage, regulatory sanctions, and civil liability from AI failures at scale, and operational disruption when AI is unavailable.","details":{"category":"ai_governance","impact":"high","inherent_rating":"high","likelihood":"medium","risk_id":"ai-accountability-liability","taxonomies":["nist-ai-rmf-risk","iso-23894-ai-risk"],"treatment":"mitigate"},"direct":false,"htmlUrl":"/agents/records/risk-ai-accountability-liability-193b3f72.html","id":"risk:ai-accountability-liability","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-accountability-liability","sourceIds":["aiuc-1","eu-ai-act","iso-42001","nist-ai-agent-identity","nist-ai-tevv-athlon"],"sourceUrl":null,"title":"AI accountability gaps and organizational liability","type":"risk","url":"/assets/agent_record-risk-ai-accountability-liability-193b3f72.db94603754a465dc.json"},{"attributes":{"category":"ai_governance","domain":["AI Governance","Secure Development (SDLC) & Application Security","Vulnerability & Patch Management"],"inherent_rating":"high","taxonomy":["nist-ai-rmf-risk","iso-23894-ai-risk"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-adversarial-poisoning-attacks","description":"Data-poisoning corrupts training data and embeds backdoors; adversarial evasion, prompt injection, and jailbreaks fool deployed models at inference; model extraction steals proprietary weights/logic — enabling harmful or policy-violating outputs.","details":{"category":"ai_governance","impact":"high","inherent_rating":"high","likelihood":"medium","risk_id":"ai-adversarial-poisoning-attacks","taxonomies":["nist-ai-rmf-risk","iso-23894-ai-risk"],"treatment":"mitigate"},"direct":false,"htmlUrl":"/agents/records/risk-ai-adversarial-poisoning-attacks-ea7df068.html","id":"risk:ai-adversarial-poisoning-attacks","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Aai-adversarial-poisoning-attacks","sourceIds":["aiuc-1","cobit-2019","eu-ai-act","iso-27001","iso-42001","nist-800-53","nist-ai-agent-identity","nist-ai-tevv-athlon"],"sourceUrl":null,"title":"Adversarial attacks, data poisoning and prompt injection","type":"risk","url":"/assets/agent_record-risk-ai-adversarial-poisoning-attacks-ea7df068.68e6c6dffe8915fb.json"}],"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:03072faf2365b29c63c8669df10cf625bc696638b7b07538582b4f6354d3d0e0","properties":{"control_id":"A.6.2.8","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-08-fada68b7.json","sourceId":"uc:UC-AI-08","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-6-2-8-209d5e42.json","targetId":"ctrl:iso-42001:A.6.2.8","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:05929d894eeaf71dcdc9fe8430c4d6f8ad348569feeeca15fda8a539519da7f7","properties":{"control_id":"A.4.3","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-03-cba029bc.json","sourceId":"uc:UC-AI-03","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-4-3-d786b798.json","targetId":"ctrl:iso-42001:A.4.3","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:069ac1259e7f29f7bbf03232bd2d8b50070b882b90869b336c8a2914671d90d2","properties":{"rationale":"Regulator/assessor-sufficient documentation is the due-diligence evidence that reduces compliance liability.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-06-f47eedcb.json","sourceId":"uc:UC-AI-06","targetDetailPath":"/data/v1/records/risk-ai-accountability-liability-193b3f72.json","targetId":"risk:ai-accountability-liability","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:07540a6ee3c39deabe10724e571660c10941303155fc7af70deef0f3aa32f99d","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-7-3-a48a0852.json","sourceId":"ctrl:iso-42001:A.7.3","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:08fc0024729a54872c2e1ce16a3c5adcc8e1a9c3b0328317d00d754c6546f7da","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-6-2-7-763177a5.json","sourceId":"ctrl:iso-42001:A.6.2.7","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:095342dc76b91ed23c339d2fb469cbf15a12ece081f5a92aeb1da547e6bf5e3f","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-10-3-ab692346.json","sourceId":"ctrl:iso-42001:A.10.3","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:099693ad77f6d4c09ca47e1e13df8465b716b5d475817d38b1b56828f143e82d","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-5-3-5192e9d2.json","sourceId":"ctrl:iso-42001:A.5.3","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0c73bc707b17a8cfb89bcd060e63c2d3898a8ee5f72391b8cb06efe4ce64734a","properties":{"control_id":"A.4.2","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-03-cba029bc.json","sourceId":"uc:UC-AI-03","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-4-2-83440407.json","targetId":"ctrl:iso-42001:A.4.2","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0df296ddd945dd750951210caae2c0fb03d0e607632e5f61315da38869fb0687","properties":{"control_id":"A.9.3","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-12-ff5c3c6a.json","sourceId":"uc:UC-AI-12","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-9-3-49fe9ffd.json","targetId":"ctrl:iso-42001:A.9.3","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0f05a5a3a9384e8adae17e08721f3a9853b46069e5d606b687b17f240cfb7cb0","properties":{"control_id":"A.6.2.4","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-07-9c5c9573.json","sourceId":"uc:UC-AI-07","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-6-2-4-7da7f3ec.json","targetId":"ctrl:iso-42001:A.6.2.4","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0ffa2def5c469c649f11402c81e8ed1599c552790a44f28df6589a3bc9e41a5a","properties":{"rationale":"Lifetime event logs provide the traceability/audit trail underpinning accountability for AI operation.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-08-fada68b7.json","sourceId":"uc:UC-AI-08","targetDetailPath":"/data/v1/records/risk-ai-accountability-liability-193b3f72.json","targetId":"risk:ai-accountability-liability","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:14ce1bbf9877b8ef426f05bf2dae3b8a0d738d5732c63d89b44b6132e165bdb7","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-6-2-3-252ad2fb.json","sourceId":"ctrl:iso-42001:A.6.2.3","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:169998eae416f6a8307276f0a52c552de07fe74a4540bdc6b574c6ca18dd190c","properties":{"control_id":"A.7.4","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-09-d6934cb6.json","sourceId":"uc:UC-AI-09","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-7-4-bbfc048a.json","targetId":"ctrl:iso-42001:A.7.4","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:17cd20e62434962680b0e52ea6fa41185fa884b512aa180abac52f6b35dd387b","properties":{"control_id":"A.2.4","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-01-156cdd4f.json","sourceId":"uc:UC-AI-01","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-2-4-59052a56.json","targetId":"ctrl:iso-42001:A.2.4","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:19072da7d290c1ae8336503ea461ffd7c87b0f5c39653f1ef42187b9ee29c4fc","properties":{"rationale":"Recording resource owners/locations supports supplier accountability and impact tracing.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-03-cba029bc.json","sourceId":"uc:UC-AI-03","targetDetailPath":"/data/v1/records/risk-ai-accountability-liability-193b3f72.json","targetId":"risk:ai-accountability-liability","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:1a4009a1dbaddc61a859729066e00bf1f0c702f149c465ebaaa70c2910f08bc7","properties":{"control_id":"A.6.1.2","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-05-d0edecc1.json","sourceId":"uc:UC-AI-05","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-6-1-2-4f8248f1.json","targetId":"ctrl:iso-42001:A.6.1.2","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:1d5c10efccf8c7fc9f59bf0a0b51260620efd41c4f1f23b5625a33fd24e8d205","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-7-4-bbfc048a.json","sourceId":"ctrl:iso-42001:A.7.4","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:212cd97aefe22e3c0ab6a542aea9267aa78a27146298405a75976ad618036db8","properties":{"control_id":"A.2.2","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-01-156cdd4f.json","sourceId":"uc:UC-AI-01","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-2-2-dbf7432d.json","targetId":"ctrl:iso-42001:A.2.2","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:25f034fceaf890f0ff88156d0830186b85eb353b8b0387ba551dccdda3c37ad2","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-10-4-fb62881c.json","sourceId":"ctrl:iso-42001:A.10.4","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:27b5f98176d788667c086a4ea8478dd90051bd23ebebca44725bc9f086f28e74","properties":{"control_id":"A.2.3","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-01-156cdd4f.json","sourceId":"uc:UC-AI-01","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-2-3-b0138cc0.json","targetId":"ctrl:iso-42001:A.2.3","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:2b1f8b907646d989790246d5430aaf48086fe5dedacc4d3f37292b8ec82ff734","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-5-2-421bdcd4.json","sourceId":"ctrl:iso-42001:A.5.2","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:2c9a66540a330a100d61f9fd50a2a81bca9e5fd93c2d7283bc50277dd38214f0","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-2-3-b0138cc0.json","sourceId":"ctrl:iso-42001:A.2.3","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:2e5167af6daabbe514a4d268ba096754e8dac420006c5cf492f4708fc99eaaf7","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-4-4-d5789378.json","sourceId":"ctrl:iso-42001:A.4.4","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:31ad04af587ce814e8de01fa55809dc31651996b7eb6221a895ec8b2bfb7ecf9","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-5-4-4ae08368.json","sourceId":"ctrl:iso-42001:A.5.4","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:37e3cf92f1b25499941000667c17a23849bc39704b8b1e7e08a8573c0fd86198","properties":{"control_id":"A.7.6","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-09-d6934cb6.json","sourceId":"uc:UC-AI-09","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-7-6-49d0eb8c.json","targetId":"ctrl:iso-42001:A.7.6","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3aaac546f9b844052b30feb5e9195236946d5993c8cf9d84be227bc4556af2e3","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-6-1-3-2f72aa38.json","sourceId":"ctrl:iso-42001:A.6.1.3","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3cada5df34044a524d37beb74060673420c4d6942601892c8f0176bffdd68840","properties":{"control_id":"A.9.2","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-12-ff5c3c6a.json","sourceId":"uc:UC-AI-12","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-9-2-2550f9b7.json","targetId":"ctrl:iso-42001:A.9.2","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:40eec372d123bb2827843cc44fd0646b679198084391e88597f126225061ae4b","properties":{"control_id":"A.7.3","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-09-d6934cb6.json","sourceId":"uc:UC-AI-09","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-7-3-a48a0852.json","targetId":"ctrl:iso-42001:A.7.3","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4118ac433b2911887c4c5d66833ab147dd85769f1d4bb9f7cd941e7889a9b8c0","properties":{"rationale":"Assigning roles/responsibilities/authorities in a RACI closes the ambiguous cross-party responsibility gap so a clearly accountable owner exists at each lifecycle stage.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-02-d2679f4e.json","sourceId":"uc:UC-AI-02","targetDetailPath":"/data/v1/records/risk-ai-accountability-liability-193b3f72.json","targetId":"risk:ai-accountability-liability","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:46cae4b0b07f25170e9fccde997f6ab0d8b8c18326a0a23b6951702802f11676","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-3-3-f62d2077.json","sourceId":"ctrl:iso-42001:A.3.3","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4be6758ab4edaf5393c793345bef2b9fbb37f175e49bb78192ebaadaa2969e0e","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-6-2-2-20339c32.json","sourceId":"ctrl:iso-42001:A.6.2.2","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4e2b6208231f9474762b8daf6568147c1ea2a867d254be2ededa4cfb07b53749","properties":{"control_id":"A.8.5","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-10-f53dd533.json","sourceId":"uc:UC-AI-10","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-8-5-7147cdf4.json","targetId":"ctrl:iso-42001:A.8.5","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4e801c96a019cd7756db1201102bf683182e8a10c71c6079e11fe4b6c4d9f7b4","properties":{"control_id":"A.8.3","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-11-7112e573.json","sourceId":"uc:UC-AI-11","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-8-3-6b72ad8e.json","targetId":"ctrl:iso-42001:A.8.3","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:50c89abd5576d62eb7ecfb91abd4aa48f8cb1a90c5e1d4d3373adf012b1dc227","properties":{"control_id":"A.6.2.6","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-08-fada68b7.json","sourceId":"uc:UC-AI-08","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-6-2-6-efbed6b5.json","targetId":"ctrl:iso-42001:A.6.2.6","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:50ff106299cd53f11f9aa4f7f5d09f3a153c2abc04d5dba5551104049a683cb0","properties":{"control_id":"A.7.5","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-09-d6934cb6.json","sourceId":"uc:UC-AI-09","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-7-5-ec3c2a85.json","targetId":"ctrl:iso-42001:A.7.5","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:5202eb4f8f32cf3e27ad76b5e446a7db45f6549e4f5a3ff0486d1f05f6d75186","properties":{"control_id":"A.6.2.5","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-07-9c5c9573.json","sourceId":"uc:UC-AI-07","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-6-2-5-fd797576.json","targetId":"ctrl:iso-42001:A.6.2.5","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:5267162df2e31d7b15e365101807288dd2bb43c43c3839f4d1e0d4d549206f9e","properties":{"rationale":"A management-approved AI policy sets governance expectations and evidences due diligence, but the operative accountability defense is role/owner assignment (UC-02/UC-13); the policy contributes rather than closing the responsibility gap.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-01-156cdd4f.json","sourceId":"uc:UC-AI-01","targetDetailPath":"/data/v1/records/risk-ai-accountability-liability-193b3f72.json","targetId":"risk:ai-accountability-liability","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:59a7b4b519afe2cfaafdcd28ac7ed46038f6fee7908bc773ee348271f978946c","properties":{"control_id":"A.5.2","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-04-b35afd39.json","sourceId":"uc:UC-AI-04","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-5-2-421bdcd4.json","targetId":"ctrl:iso-42001:A.5.2","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:5b8c030ba6780fae3939e5fff17f613e554981eb0330531cfe9cf9963ab2c374","properties":{"control_id":"A.6.1.3","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-05-d0edecc1.json","sourceId":"uc:UC-AI-05","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-6-1-3-2f72aa38.json","targetId":"ctrl:iso-42001:A.6.1.3","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:5d9de3df3df25338e109e4a141a9b4e5abf66ea73b70e14d438bdca19bc53da5","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-3-2-604cbc1c.json","sourceId":"ctrl:iso-42001:A.3.2","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:646c939dd72e51dbbb71f9584d040558e7801b0e7720e50c3769cdd3c390fc72","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-8-2-5f2aec8b.json","sourceId":"ctrl:iso-42001:A.8.2","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:65910822101e03f0640cd93319be6d353cf438e20e19b7b389ce4949f54c4da0","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-4-3-d786b798.json","sourceId":"ctrl:iso-42001:A.4.3","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:65f26706ea44b5893695fdd28fa5ec654a0213eb3da7bb52bfaadb4a75b665a7","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-7-2-29a30b42.json","sourceId":"ctrl:iso-42001:A.7.2","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:68d8faad99e45a9a74e1bffc348615ff335e104fab0cc55ddd91f4b3a2208702","properties":{"control_id":"A.7.2","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-09-d6934cb6.json","sourceId":"uc:UC-AI-09","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-7-2-29a30b42.json","targetId":"ctrl:iso-42001:A.7.2","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:6924b6548c6a7bf8d358e190e7a1cea37583ed97635fe288bcad653f4bd53670","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-9-3-49fe9ffd.json","sourceId":"ctrl:iso-42001:A.9.3","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7253efa1cf03494d97c7deb695251f2702932af2763430ad7d7a451fbae5c477","properties":{"control_id":"A.10.4","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-14-cc67739e.json","sourceId":"uc:UC-AI-14","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-10-4-fb62881c.json","targetId":"ctrl:iso-42001:A.10.4","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:73eabbd49ef8768c825eabfa0a2f752c1ffb584843834ec8d45c76a6dce4a9e6","properties":{"control_id":"A.10.3","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-14-cc67739e.json","sourceId":"uc:UC-AI-14","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-10-3-ab692346.json","targetId":"ctrl:iso-42001:A.10.3","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:81cf53b47148f5f9286805502f13c047cf578960112bd00a8b17a6b309210abd","properties":{"control_id":"A.6.2.3","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-06-f47eedcb.json","sourceId":"uc:UC-AI-06","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-6-2-3-252ad2fb.json","targetId":"ctrl:iso-42001:A.6.2.3","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:82840c01cfa52b238366839c5390980c08792c276769ecd34e1f606b8303f4ca","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-4-2-83440407.json","sourceId":"ctrl:iso-42001:A.4.2","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:84059028aa84c8e1e4ea854971dfa5bf4e8d663dd503d1e7b0f32ed0419c12de","properties":{"rationale":"Timely incident and regulator reporting discharges external duties and reduces sanction exposure, but does not close the core ambiguous-responsibility gap the risk centers on; role/owner assignment (UC-02/UC-13) is operative.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-11-7112e573.json","sourceId":"uc:UC-AI-11","targetDetailPath":"/data/v1/records/risk-ai-accountability-liability-193b3f72.json","targetId":"risk:ai-accountability-liability","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:85327f24d83df8a0dec90bf98a8af4879989a7db33a77f9e013559f29f66e539","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-6-2-4-7da7f3ec.json","sourceId":"ctrl:iso-42001:A.6.2.4","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:886614e2cb1db347763af71a783ea3c40eccd4f74556691c7f40a865b8ef8774","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-8-5-7147cdf4.json","sourceId":"ctrl:iso-42001:A.8.5","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:8a69cec2042cee3702ebb5634a5de10a7104e70a3e3072d0fe3076b02acd0e83","properties":{"control_id":"A.5.4","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-04-b35afd39.json","sourceId":"uc:UC-AI-04","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-5-4-4ae08368.json","targetId":"ctrl:iso-42001:A.5.4","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:8b9d489f24b6cf9a77a0d60a226a11f1468c74b1a0e130e62e9ce4dee9239361","properties":{"rationale":"Provenance recording and data-selection governance reduce training-data poisoning and embedded backdoors.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-09-d6934cb6.json","sourceId":"uc:UC-AI-09","targetDetailPath":"/data/v1/records/risk-ai-adversarial-poisoning-attacks-ea7df068.json","targetId":"risk:ai-adversarial-poisoning-attacks","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:8c2fc6acb600c81c4f03966c26d609b653597feba3f45238f553e7d97bafddcc","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-6-1-2-4f8248f1.json","sourceId":"ctrl:iso-42001:A.6.1.2","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:9538ae99ab52bae1266a45cc4431aa33ddc5b3f3dbb5a308f0569c03df54ecf1","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-9-4-8a78e94e.json","sourceId":"ctrl:iso-42001:A.9.4","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a11fee8080a233a2b1efa7d05e03eb142f42f3f0c28823f090510caf114ef1a8","properties":{"control_id":"A.3.2","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-02-d2679f4e.json","sourceId":"uc:UC-AI-02","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-3-2-604cbc1c.json","targetId":"ctrl:iso-42001:A.3.2","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a199a8ba39979baaab8758cabf3a27ff3526325b777713f75f7c0c3f6006e8bc","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-8-4-1adaf7d2.json","sourceId":"ctrl:iso-42001:A.8.4","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a512a3572fbf5e8e3ade17d9c7c8c8a139d78f995be3f5e68fcd757df0598f44","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-4-6-579bb92f.json","sourceId":"ctrl:iso-42001:A.4.6","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a5720912275d903a03e26b1df22da770e626d9aea8a4991f948a5db1094c7c75","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-2-4-59052a56.json","sourceId":"ctrl:iso-42001:A.2.4","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a830488120b8123d2a93c38184e2e88547aa4611abd01bd91432b8bd06ee9517","properties":{"control_id":"A.10.2","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-13-2ce71d80.json","sourceId":"uc:UC-AI-13","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-10-2-8a417a99.json","targetId":"ctrl:iso-42001:A.10.2","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ac0f56eac4d76946d91986281a66929b40d4dcbe5fef41076023cc0217bd123c","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-5-5-35172fd6.json","sourceId":"ctrl:iso-42001:A.5.5","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ad54d87332b3880934a01add9e8cdcf4cf52cb692b0332df9812a550bb787930","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-2-2-dbf7432d.json","sourceId":"ctrl:iso-42001:A.2.2","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ad87d00947f292fb318324aa72b131a1b8c125d69a4a403aa5c92b87ce61c7ad","properties":{"rationale":"Supplier vetting reduces backdoored or poisoned third-party models and components entering the pipeline.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-14-cc67739e.json","sourceId":"uc:UC-AI-14","targetDetailPath":"/data/v1/records/risk-ai-adversarial-poisoning-attacks-ea7df068.json","targetId":"risk:ai-adversarial-poisoning-attacks","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:af2db1df03329b0fc816390fe3a7d383fe2bde1e39479e7887084f7bf42cbe9f","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-6-2-6-efbed6b5.json","sourceId":"ctrl:iso-42001:A.6.2.6","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:bd2bb0339a2dce076f5f2fb913754144f1341e6f5e2837680fbb154fb1b30166","properties":{"control_id":"A.5.3","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-04-b35afd39.json","sourceId":"uc:UC-AI-04","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-5-3-5192e9d2.json","targetId":"ctrl:iso-42001:A.5.3","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:bd8428d23e95a3d95f6c811bb30c3160f4e6cf076fbf5ba6865091d3e81db1a8","properties":{"control_id":"A.8.4","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-11-7112e573.json","sourceId":"uc:UC-AI-11","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-8-4-1adaf7d2.json","targetId":"ctrl:iso-42001:A.8.4","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c57eab47d69bc67762f0712a4e91effa38ef3c7d19638dea582206515bd79189","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-4-5-80e0e06c.json","sourceId":"ctrl:iso-42001:A.4.5","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c62a4b581d28cec25438651c27758ea514a060b3620213f1339713ab3c8aa744","properties":{"control_id":"A.4.4","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-03-cba029bc.json","sourceId":"uc:UC-AI-03","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-4-4-d5789378.json","targetId":"ctrl:iso-42001:A.4.4","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d1e1c3d34ae1816a1c94e4cbf595b24e2536dc0f9ff2226deebb6cb2eee7e0ee","properties":{"rationale":"Determining value-chain role and allocating responsibilities/obligations to named owners closes the ambiguous cross-party accountability the risk names.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-13-2ce71d80.json","sourceId":"uc:UC-AI-13","targetDetailPath":"/data/v1/records/risk-ai-accountability-liability-193b3f72.json","targetId":"risk:ai-accountability-liability","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d20ac8e6215c2b0f7a38613d003239d805639d5e370f6e134425d5c2829bdfb3","properties":{"control_id":"A.8.2","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-10-f53dd533.json","sourceId":"uc:UC-AI-10","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-8-2-5f2aec8b.json","targetId":"ctrl:iso-42001:A.8.2","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d6c0ffc042590f7836040b420c5c001f8ae4407640c1dd5b8de402368288d74e","properties":{"control_id":"A.4.6","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-02-d2679f4e.json","sourceId":"uc:UC-AI-02","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-4-6-579bb92f.json","targetId":"ctrl:iso-42001:A.4.6","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d90555e10a96ca2dc6b37c5abdd8a0d97d2ac221a0f435212fd02eb72a602224","properties":{"control_id":"A.6.2.2","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-05-d0edecc1.json","sourceId":"uc:UC-AI-05","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-6-2-2-20339c32.json","targetId":"ctrl:iso-42001:A.6.2.2","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:dbadfdea538defc8570a003d278a8a553d44d8be026b5af839998692b00d4555","properties":{"control_id":"A.3.3","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-11-7112e573.json","sourceId":"uc:UC-AI-11","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-3-3-f62d2077.json","targetId":"ctrl:iso-42001:A.3.3","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:dec9e4544508e42974f878b50a5c83aaf867ab79b9c9a0ff23c77b5856f93c07","properties":{"control_id":"A.9.4","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-12-ff5c3c6a.json","sourceId":"uc:UC-AI-12","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-9-4-8a78e94e.json","targetId":"ctrl:iso-42001:A.9.4","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e10126ba919b61027217ffcba10522ae77b2ae368e2c54df6fcf15a5d4e162e2","properties":{"control_id":"A.4.5","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-03-cba029bc.json","sourceId":"uc:UC-AI-03","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-4-5-80e0e06c.json","targetId":"ctrl:iso-42001:A.4.5","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e15d5339038dbda4e2e476ff11a6fa9dddcc48cb6e56d2d1e25f8e0d368492d5","properties":{"rationale":"Supplier evaluations and customer communications allocate and evidence responsibility across the relationship.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-14-cc67739e.json","sourceId":"uc:UC-AI-14","targetDetailPath":"/data/v1/records/risk-ai-accountability-liability-193b3f72.json","targetId":"risk:ai-accountability-liability","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e8d77be0449e480d17daaa758429f07e545a397f5dde96b03454f3321aed318e","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-7-5-ec3c2a85.json","sourceId":"ctrl:iso-42001:A.7.5","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e9dd0fb3caa3f38f4b45c0372b47db8bdddfcda9e2573aa6cef1e5016b0f1c63","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-6-2-5-fd797576.json","sourceId":"ctrl:iso-42001:A.6.2.5","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ecda917b2415cdd8e1478bce0ad7b5ecbdafc1ebb254f2f79dbe0ac11052787a","properties":{"control_id":"A.5.5","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-04-b35afd39.json","sourceId":"uc:UC-AI-04","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-5-5-35172fd6.json","targetId":"ctrl:iso-42001:A.5.5","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ed207ff3df3966001e9439af41495aadbbcc46d4bee3846b13fc1862c2463614","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-8-3-6b72ad8e.json","sourceId":"ctrl:iso-42001:A.8.3","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f5ca66d354274547d8ebabe824872f9c9ae75013cb3683174f8bcf6ec8bab507","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-6-2-8-209d5e42.json","sourceId":"ctrl:iso-42001:A.6.2.8","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:fcd371628b34c604b81712b3be3a5d8a3369279945d83920aea3df049d01f6ea","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-9-2-2550f9b7.json","sourceId":"ctrl:iso-42001:A.9.2","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:fe7812c7bce4da19346855b9b0263f017f98af1369fd0f0d0089a01d8d8f703d","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-7-6-49d0eb8c.json","sourceId":"ctrl:iso-42001:A.7.6","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ff116661bcc8d9534bb7b82a60521489aea0057fa21093f10ec9daee1589dbf0","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-42001-a-10-2-8a417a99.json","sourceId":"ctrl:iso-42001:A.10.2","targetDetailPath":"/data/v1/records/std-iso-42001-062f0b06.json","targetId":"std:iso-42001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ffcd8c3ea2d4454e5fe0ca418f3af6f735403fa06868d4d24ce0148afa4b3ab5","properties":{"control_id":"A.6.2.7","coverage":"full","delta":null,"framework":"iso-42001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2023"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-06-f47eedcb.json","sourceId":"uc:UC-AI-06","targetDetailPath":"/data/v1/records/ctrl-iso-42001-a-6-2-7-763177a5.json","targetId":"ctrl:iso-42001:A.6.2.7","type":"maps_to"}],"schemaVersion":1,"scope":"sources","total":91}