{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","contextIds":["ctrl:aiuc-1:A004","ctrl:aiuc-1:A005","ctrl:aiuc-1:B003","ctrl:ccpa:CCPA-1798.100","ctrl:ccpa:CCPA-1798.120-121","ctrl:gdpr:GDPR-Art12-14","ctrl:gdpr:GDPR-Art44-49","ctrl:gdpr:GDPR-Art7","ctrl:hipaa:HIPAA-164.312(d)","ctrl:hipaa:HIPAA-164.508","ctrl:hipaa:HIPAA-164.520","ctrl:iso-27001:A.6.3","ctrl:iso-27001:A.6.7","ctrl:iso-27001:A.8.12","ctrl:iso-27001:A.8.16","ctrl:iso-27001:A.8.5","ctrl:iso-27001:A.8.6","ctrl:nist-800-53:AC-14","ctrl:nist-800-53:AC-21","ctrl:nist-800-53:AC-22","ctrl:nist-800-53:AC-4","ctrl:nist-800-53:AC-7","ctrl:nist-800-53:AT-2","ctrl:nist-800-53:AT-3","ctrl:nist-800-53:AT-4","ctrl:nist-800-53:AT-6","ctrl:nist-800-53:AU-14","ctrl:nist-800-53:CA-7","ctrl:nist-800-53:IA-10","ctrl:nist-800-53:IA-12","ctrl:nist-800-53:IA-2","ctrl:nist-800-53:IA-8","ctrl:nist-800-53:PM-13","ctrl:nist-800-53:PT-4","ctrl:nist-800-53:PT-5","ctrl:nist-800-53:PT-6","ctrl:nist-800-53:SI-4","ctrl:nist-ai-agent-identity:NIST-AGI-07","ctrl:nist-ai-tevv-athlon:NIST-TEVV-04","ctrl:nist-csf-2:DE.CM-01"],"directIds":[],"kind":"bundle","metadata":"/assets/agent_metadata.5c7612c9c5b0b455.json","name":"Awareness & Training","next":"/assets/agent_topics-awareness-training-2.d744091cdc12a326.json","page":1,"pageSize":40,"records":[{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/aiuc-1/","description":"Protect IP & trade secrets","details":{"automation":"hybrid","control_category":"technical","control_id":"A004","control_type":"preventive","domains":["AI Governance","Data Protection & Privacy"],"framework":"aiuc-1","group":"Data & Privacy","key_control":false,"requirement_frequency":"Every 12 months","requirement_status":"mandatory","risk_count":5,"source_pages":null,"source_url":"https://www.aiuc-1.com/data-and-privacy/protect-ip-trade-secrets"},"direct":false,"htmlUrl":"/agents/records/ctrl-aiuc-1-a004-0955d43a.html","id":"ctrl:aiuc-1:A004","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aaiuc-1%3AA004","sourceIds":["aiuc-1"],"sourceUrl":"https://www.aiuc-1.com/data-and-privacy/protect-ip-trade-secrets","title":"A004 — Protect IP & trade secrets","type":"control","url":"/assets/agent_record-ctrl-aiuc-1-a004-0955d43a.1017c974af4b43d0.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/aiuc-1/","description":"Prevent cross-customer data exposure","details":{"automation":"automated","control_category":"technical","control_id":"A005","control_type":"preventive","domains":["AI Governance","Data Protection & Privacy"],"framework":"aiuc-1","group":"Data & Privacy","key_control":false,"requirement_frequency":"Every 12 months","requirement_status":"mandatory","risk_count":5,"source_pages":null,"source_url":"https://www.aiuc-1.com/data-and-privacy/prevent-cross-customer-data-exposure"},"direct":false,"htmlUrl":"/agents/records/ctrl-aiuc-1-a005-12903764.html","id":"ctrl:aiuc-1:A005","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aaiuc-1%3AA005","sourceIds":["aiuc-1"],"sourceUrl":"https://www.aiuc-1.com/data-and-privacy/prevent-cross-customer-data-exposure","title":"A005 — Prevent cross-customer data exposure","type":"control","url":"/assets/agent_record-ctrl-aiuc-1-a005-12903764.f738ac844492303a.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/aiuc-1/","description":"Manage public release of technical details","details":{"automation":"manual","control_category":"administrative","control_id":"B003","control_type":"preventive","domains":["AI Governance","Access Control & Identity Management","Secure Development (SDLC) & Application Security"],"framework":"aiuc-1","group":"Security","key_control":false,"requirement_frequency":"Every 12 months","requirement_status":"optional","risk_count":3,"source_pages":null,"source_url":"https://www.aiuc-1.com/security/limit-technical-over-disclosure"},"direct":false,"htmlUrl":"/agents/records/ctrl-aiuc-1-b003-8c740cc9.html","id":"ctrl:aiuc-1:B003","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aaiuc-1%3AB003","sourceIds":["aiuc-1"],"sourceUrl":"https://www.aiuc-1.com/security/limit-technical-over-disclosure","title":"B003 — Manage public release of technical details","type":"control","url":"/assets/agent_record-ctrl-aiuc-1-b003-8c740cc9.32efe3be039c433b.json"},{"attributes":{"category":"administrative","framework":"ccpa","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/ccpa/","description":"Notice at collection and consumer right to know","details":{"automation":"manual","control_category":"administrative","control_id":"CCPA-1798.100","control_type":"preventive","domains":["Data Protection & Privacy","Compliance, Audit & Assurance","Governance, Policy & Oversight"],"framework":"ccpa","group":"CCPA/CPRA (California Consumer Privacy)","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-ccpa-ccpa-1798-100-b353d024.html","id":"ctrl:ccpa:CCPA-1798.100","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Accpa%3ACCPA-1798.100","sourceIds":["ccpa"],"sourceUrl":null,"title":"CCPA-1798.100 — Notice at collection and consumer right to know","type":"control","url":"/assets/agent_record-ctrl-ccpa-ccpa-1798-100-b353d024.a53d312739a838ca.json"},{"attributes":{"category":"administrative","framework":"ccpa","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/ccpa/","description":"Right to opt out of sale/sharing and to limit use of sensitive personal information","details":{"automation":"hybrid","control_category":"administrative","control_id":"CCPA-1798.120-121","control_type":"preventive","domains":["Data Protection & Privacy","Compliance, Audit & Assurance","Governance, Policy & Oversight"],"framework":"ccpa","group":"CCPA/CPRA (California Consumer Privacy)","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-ccpa-ccpa-1798-120-121-7655ba5c.html","id":"ctrl:ccpa:CCPA-1798.120-121","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Accpa%3ACCPA-1798.120-121","sourceIds":["ccpa"],"sourceUrl":null,"title":"CCPA-1798.120-121 — Right to opt out of sale/sharing and to limit use of sensitive personal information","type":"control","url":"/assets/agent_record-ctrl-ccpa-ccpa-1798-120-121-7655ba5c.5226b0c9096d7dc8.json"},{"attributes":{"category":"administrative","framework":"gdpr","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/gdpr/","description":"Transparency and information to data subjects","details":{"automation":"manual","control_category":"administrative","control_id":"GDPR-Art12-14","control_type":"preventive","domains":["Data Protection & Privacy","Governance, Policy & Oversight","Incident Management & Response","Third-Party / Supply-Chain Risk","Risk Assessment & Management"],"framework":"gdpr","group":"EU GDPR","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-gdpr-gdpr-art12-14-51a7eca7.html","id":"ctrl:gdpr:GDPR-Art12-14","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Agdpr%3AGDPR-Art12-14","sourceIds":["gdpr"],"sourceUrl":null,"title":"GDPR-Art12-14 — Transparency and information to data subjects","type":"control","url":"/assets/agent_record-ctrl-gdpr-gdpr-art12-14-51a7eca7.443bcfb1c9d586c8.json"},{"attributes":{"category":"administrative","framework":"gdpr","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/gdpr/","description":"International transfers of personal data","details":{"automation":"manual","control_category":"administrative","control_id":"GDPR-Art44-49","control_type":"preventive","domains":["Data Protection & Privacy","Governance, Policy & Oversight","Incident Management & Response","Third-Party / Supply-Chain Risk","Risk Assessment & Management"],"framework":"gdpr","group":"EU GDPR","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-gdpr-gdpr-art44-49-8ad28202.html","id":"ctrl:gdpr:GDPR-Art44-49","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Agdpr%3AGDPR-Art44-49","sourceIds":["gdpr"],"sourceUrl":null,"title":"GDPR-Art44-49 — International transfers of personal data","type":"control","url":"/assets/agent_record-ctrl-gdpr-gdpr-art44-49-8ad28202.5b6cd8ca6d1807c9.json"},{"attributes":{"category":"administrative","framework":"gdpr","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/gdpr/","description":"Conditions for consent","details":{"automation":"manual","control_category":"administrative","control_id":"GDPR-Art7","control_type":"preventive","domains":["Data Protection & Privacy","Governance, Policy & Oversight","Incident Management & Response","Third-Party / Supply-Chain Risk","Risk Assessment & Management"],"framework":"gdpr","group":"EU GDPR","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-gdpr-gdpr-art7-218fdd35.html","id":"ctrl:gdpr:GDPR-Art7","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Agdpr%3AGDPR-Art7","sourceIds":["gdpr"],"sourceUrl":null,"title":"GDPR-Art7 — Conditions for consent","type":"control","url":"/assets/agent_record-ctrl-gdpr-gdpr-art7-218fdd35.f32ec1f060af891d.json"},{"attributes":{"category":"technical","framework":"hipaa","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/hipaa/","description":"Person or entity authentication before ePHI access","details":{"automation":"hybrid","control_category":"technical","control_id":"HIPAA-164.312(d)","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Access Control & Identity Management","Physical & Environmental Security","Logging, Monitoring & Detection","Business Continuity & Disaster Recovery","Third-Party / Supply-Chain Risk","Data Protection & Privacy"],"framework":"hipaa","group":"HIPAA Security Rule","key_control":true,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-hipaa-hipaa-164-312-d-d1e8fe74.html","id":"ctrl:hipaa:HIPAA-164.312(d)","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Ahipaa%3AHIPAA-164.312%28d%29","sourceIds":["hipaa"],"sourceUrl":null,"title":"HIPAA-164.312(d) — Person or entity authentication before ePHI access","type":"control","url":"/assets/agent_record-ctrl-hipaa-hipaa-164-312-d-d1e8fe74.a9123c2005f8e7fd.json"},{"attributes":{"category":"administrative","framework":"hipaa","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/hipaa/","description":"Authorizations required for other uses and disclosures of PHI","details":{"automation":"manual","control_category":"administrative","control_id":"HIPAA-164.508","control_type":"preventive","domains":["Data Protection & Privacy","Incident Management & Response","Compliance, Audit & Assurance"],"framework":"hipaa","group":"HIPAA Privacy & Breach Notification","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-hipaa-hipaa-164-508-208be590.html","id":"ctrl:hipaa:HIPAA-164.508","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Ahipaa%3AHIPAA-164.508","sourceIds":["hipaa"],"sourceUrl":null,"title":"HIPAA-164.508 — Authorizations required for other uses and disclosures of PHI","type":"control","url":"/assets/agent_record-ctrl-hipaa-hipaa-164-508-208be590.6ab90d475414ce0f.json"},{"attributes":{"category":"administrative","framework":"hipaa","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/hipaa/","description":"Notice of privacy practices for PHI","details":{"automation":"manual","control_category":"administrative","control_id":"HIPAA-164.520","control_type":"preventive","domains":["Data Protection & Privacy","Incident Management & Response","Compliance, Audit & Assurance"],"framework":"hipaa","group":"HIPAA Privacy & Breach Notification","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-hipaa-hipaa-164-520-e2735a22.html","id":"ctrl:hipaa:HIPAA-164.520","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Ahipaa%3AHIPAA-164.520","sourceIds":["hipaa"],"sourceUrl":null,"title":"HIPAA-164.520 — Notice of privacy practices for PHI","type":"control","url":"/assets/agent_record-ctrl-hipaa-hipaa-164-520-e2735a22.0d8c0c132c614f32.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Information security awareness, education and training","details":{"automation":"manual","control_category":"administrative","control_id":"A.6.3","control_type":"preventive","domains":["Awareness & Training"],"framework":"iso-27001","group":"People controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-iso-27001-a-6-3-b9bb8fbd.html","id":"ctrl:iso-27001:A.6.3","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.6.3","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.6.3 — Information security awareness, education and training","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-6-3-b9bb8fbd.365b3922b77de0c9.json"},{"attributes":{"category":"administrative","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Remote working","details":{"automation":"manual","control_category":"administrative","control_id":"A.6.7","control_type":"preventive","domains":["Human Resources / Personnel Security","Awareness & Training","Incident Management & Response"],"framework":"iso-27001","group":"People controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-iso-27001-a-6-7-74bc3cd8.html","id":"ctrl:iso-27001:A.6.7","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.6.7","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.6.7 — Remote working","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-6-7-74bc3cd8.6d526aa59cf9e4d5.json"},{"attributes":{"category":"technical","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Data leakage prevention","details":{"automation":"automated","control_category":"technical","control_id":"A.8.12","control_type":"preventive","domains":["Data Protection & Privacy"],"framework":"iso-27001","group":"Technological controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-iso-27001-a-8-12-8310e795.html","id":"ctrl:iso-27001:A.8.12","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.8.12","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.8.12 — Data leakage prevention","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-8-12-8310e795.cb4eafa1d3e16902.json"},{"attributes":{"category":"technical","framework":"iso-27001","type":"detective"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Monitoring activities","details":{"automation":"automated","control_category":"technical","control_id":"A.8.16","control_type":"detective","domains":["Logging, Monitoring & Detection","Network & Communications Security"],"framework":"iso-27001","group":"Technological controls","key_control":true,"requirement_frequency":null,"requirement_status":null,"risk_count":6,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-iso-27001-a-8-16-ca49cbfe.html","id":"ctrl:iso-27001:A.8.16","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.8.16","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.8.16 — Monitoring activities","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-8-16-ca49cbfe.c9fcc0892cc15830.json"},{"attributes":{"category":"technical","framework":"iso-27001","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Secure authentication","details":{"automation":"automated","control_category":"technical","control_id":"A.8.5","control_type":"preventive","domains":["Access Control & Identity Management"],"framework":"iso-27001","group":"Technological controls","key_control":true,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-iso-27001-a-8-5-4c63b8ae.html","id":"ctrl:iso-27001:A.8.5","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.8.5","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.8.5 — Secure authentication","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-8-5-4c63b8ae.c9f2b2cad2bb5256.json"},{"attributes":{"category":"technical","framework":"iso-27001","type":"detective"},"canonicalUrl":"https://controlsmap.com/frameworks/iso-27001/","description":"Capacity management","details":{"automation":"hybrid","control_category":"technical","control_id":"A.8.6","control_type":"detective","domains":["Access Control & Identity Management","Cryptography & Key Management","Data Protection & Privacy","Secure Configuration & Change Management","Vulnerability & Patch Management","Logging, Monitoring & Detection","Business Continuity & Disaster Recovery","Network & Communications Security","Secure Development (SDLC) & Application Security"],"framework":"iso-27001","group":"Technological controls","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-iso-27001-a-8-6-d9abb4dc.html","id":"ctrl:iso-27001:A.8.6","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aiso-27001%3AA.8.6","sourceIds":["iso-27001"],"sourceUrl":null,"title":"A.8.6 — Capacity management","type":"control","url":"/assets/agent_record-ctrl-iso-27001-a-8-6-d9abb4dc.e3b708aae744320b.json"},{"attributes":{"category":"administrative","framework":"nist-800-53","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/nist-800-53/","description":"Permitted Actions Without Identification or Authentication","details":{"automation":"manual","control_category":"administrative","control_id":"AC-14","control_type":"preventive","domains":["Access Control & Identity Management","Network & Communications Security"],"framework":"nist-800-53","group":"Access Control","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-nist-800-53-ac-14-f34116e8.html","id":"ctrl:nist-800-53:AC-14","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Anist-800-53%3AAC-14","sourceIds":["nist-800-53"],"sourceUrl":null,"title":"AC-14 — Permitted Actions Without Identification or Authentication","type":"control","url":"/assets/agent_record-ctrl-nist-800-53-ac-14-f34116e8.74aee5070b0f9bc1.json"},{"attributes":{"category":"administrative","framework":"nist-800-53","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/nist-800-53/","description":"Information Sharing","details":{"automation":"manual","control_category":"administrative","control_id":"AC-21","control_type":"preventive","domains":["Access Control & Identity Management","Network & Communications Security"],"framework":"nist-800-53","group":"Access Control","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-nist-800-53-ac-21-b2e5ceab.html","id":"ctrl:nist-800-53:AC-21","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Anist-800-53%3AAC-21","sourceIds":["nist-800-53"],"sourceUrl":null,"title":"AC-21 — Information Sharing","type":"control","url":"/assets/agent_record-ctrl-nist-800-53-ac-21-b2e5ceab.ece5af1ec69cbb3e.json"},{"attributes":{"category":"administrative","framework":"nist-800-53","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/nist-800-53/","description":"Publicly Accessible Content","details":{"automation":"manual","control_category":"administrative","control_id":"AC-22","control_type":"preventive","domains":["Access Control & Identity Management","Network & Communications Security"],"framework":"nist-800-53","group":"Access Control","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-nist-800-53-ac-22-b3b8bc68.html","id":"ctrl:nist-800-53:AC-22","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Anist-800-53%3AAC-22","sourceIds":["nist-800-53"],"sourceUrl":null,"title":"AC-22 — Publicly Accessible Content","type":"control","url":"/assets/agent_record-ctrl-nist-800-53-ac-22-b3b8bc68.800cb96cfb181adb.json"},{"attributes":{"category":"technical","framework":"nist-800-53","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/nist-800-53/","description":"Information Flow Enforcement","details":{"automation":"automated","control_category":"technical","control_id":"AC-4","control_type":"preventive","domains":["Data Protection & Privacy","Network & Communications Security"],"framework":"nist-800-53","group":"Access Control","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-nist-800-53-ac-4-803f5fce.html","id":"ctrl:nist-800-53:AC-4","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Anist-800-53%3AAC-4","sourceIds":["nist-800-53"],"sourceUrl":null,"title":"AC-4 — Information Flow Enforcement","type":"control","url":"/assets/agent_record-ctrl-nist-800-53-ac-4-803f5fce.04b346cce4b3a152.json"},{"attributes":{"category":"technical","framework":"nist-800-53","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/nist-800-53/","description":"Unsuccessful Logon Attempts","details":{"automation":"automated","control_category":"technical","control_id":"AC-7","control_type":"preventive","domains":["Access Control & Identity Management"],"framework":"nist-800-53","group":"Access Control","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-nist-800-53-ac-7-b8145c2d.html","id":"ctrl:nist-800-53:AC-7","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Anist-800-53%3AAC-7","sourceIds":["nist-800-53"],"sourceUrl":null,"title":"AC-7 — Unsuccessful Logon Attempts","type":"control","url":"/assets/agent_record-ctrl-nist-800-53-ac-7-b8145c2d.0aa559b999c0e5e2.json"},{"attributes":{"category":"administrative","framework":"nist-800-53","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/nist-800-53/","description":"Literacy Training and Awareness","details":{"automation":"manual","control_category":"administrative","control_id":"AT-2","control_type":"preventive","domains":["Awareness & Training"],"framework":"nist-800-53","group":"Awareness and Training","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-nist-800-53-at-2-8a8c6b57.html","id":"ctrl:nist-800-53:AT-2","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Anist-800-53%3AAT-2","sourceIds":["nist-800-53"],"sourceUrl":null,"title":"AT-2 — Literacy Training and Awareness","type":"control","url":"/assets/agent_record-ctrl-nist-800-53-at-2-8a8c6b57.394b39371cc9c4df.json"},{"attributes":{"category":"administrative","framework":"nist-800-53","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/nist-800-53/","description":"Role-based Training","details":{"automation":"manual","control_category":"administrative","control_id":"AT-3","control_type":"preventive","domains":["Awareness & Training"],"framework":"nist-800-53","group":"Awareness and Training","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-nist-800-53-at-3-003c8052.html","id":"ctrl:nist-800-53:AT-3","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Anist-800-53%3AAT-3","sourceIds":["nist-800-53"],"sourceUrl":null,"title":"AT-3 — Role-based Training","type":"control","url":"/assets/agent_record-ctrl-nist-800-53-at-3-003c8052.d64778157a3f4394.json"},{"attributes":{"category":"administrative","framework":"nist-800-53","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/nist-800-53/","description":"Training Records","details":{"automation":"manual","control_category":"administrative","control_id":"AT-4","control_type":"preventive","domains":["Awareness & Training"],"framework":"nist-800-53","group":"Awareness and Training","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-nist-800-53-at-4-3f2a5df3.html","id":"ctrl:nist-800-53:AT-4","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Anist-800-53%3AAT-4","sourceIds":["nist-800-53"],"sourceUrl":null,"title":"AT-4 — Training Records","type":"control","url":"/assets/agent_record-ctrl-nist-800-53-at-4-3f2a5df3.94144e0d963d7414.json"},{"attributes":{"category":"administrative","framework":"nist-800-53","type":"detective"},"canonicalUrl":"https://controlsmap.com/frameworks/nist-800-53/","description":"Training Feedback","details":{"automation":"manual","control_category":"administrative","control_id":"AT-6","control_type":"detective","domains":["Awareness & Training"],"framework":"nist-800-53","group":"Awareness and Training","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-nist-800-53-at-6-28585f3f.html","id":"ctrl:nist-800-53:AT-6","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Anist-800-53%3AAT-6","sourceIds":["nist-800-53"],"sourceUrl":null,"title":"AT-6 — Training Feedback","type":"control","url":"/assets/agent_record-ctrl-nist-800-53-at-6-28585f3f.4e39d8e6a454e97a.json"},{"attributes":{"category":"technical","framework":"nist-800-53","type":"detective"},"canonicalUrl":"https://controlsmap.com/frameworks/nist-800-53/","description":"Session Audit","details":{"automation":"automated","control_category":"technical","control_id":"AU-14","control_type":"detective","domains":["Logging, Monitoring & Detection"],"framework":"nist-800-53","group":"Audit and Accountability","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-nist-800-53-au-14-51fc93b2.html","id":"ctrl:nist-800-53:AU-14","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Anist-800-53%3AAU-14","sourceIds":["nist-800-53"],"sourceUrl":null,"title":"AU-14 — Session Audit","type":"control","url":"/assets/agent_record-ctrl-nist-800-53-au-14-51fc93b2.17e8fe05233afa7b.json"},{"attributes":{"category":"administrative","framework":"nist-800-53","type":"detective"},"canonicalUrl":"https://controlsmap.com/frameworks/nist-800-53/","description":"Continuous Monitoring","details":{"automation":"hybrid","control_category":"administrative","control_id":"CA-7","control_type":"detective","domains":["Compliance, Audit & Assurance","Logging, Monitoring & Detection"],"framework":"nist-800-53","group":"Assessment, Authorization, and Monitoring","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":6,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-nist-800-53-ca-7-a6cb4db3.html","id":"ctrl:nist-800-53:CA-7","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Anist-800-53%3ACA-7","sourceIds":["nist-800-53"],"sourceUrl":null,"title":"CA-7 — Continuous Monitoring","type":"control","url":"/assets/agent_record-ctrl-nist-800-53-ca-7-a6cb4db3.26185baa4d62f52b.json"},{"attributes":{"category":"technical","framework":"nist-800-53","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/nist-800-53/","description":"Adaptive Authentication","details":{"automation":"automated","control_category":"technical","control_id":"IA-10","control_type":"preventive","domains":["Access Control & Identity Management","Cryptography & Key Management"],"framework":"nist-800-53","group":"Identification and Authentication","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-nist-800-53-ia-10-ee664ad9.html","id":"ctrl:nist-800-53:IA-10","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Anist-800-53%3AIA-10","sourceIds":["nist-800-53"],"sourceUrl":null,"title":"IA-10 — Adaptive Authentication","type":"control","url":"/assets/agent_record-ctrl-nist-800-53-ia-10-ee664ad9.eac1c61b298a2088.json"},{"attributes":{"category":"administrative","framework":"nist-800-53","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/nist-800-53/","description":"Identity Proofing","details":{"automation":"manual","control_category":"administrative","control_id":"IA-12","control_type":"preventive","domains":["Access Control & Identity Management","Cryptography & Key Management"],"framework":"nist-800-53","group":"Identification and Authentication","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-nist-800-53-ia-12-87eb72e6.html","id":"ctrl:nist-800-53:IA-12","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Anist-800-53%3AIA-12","sourceIds":["nist-800-53"],"sourceUrl":null,"title":"IA-12 — Identity Proofing","type":"control","url":"/assets/agent_record-ctrl-nist-800-53-ia-12-87eb72e6.fdc56b4e9abf9ed1.json"},{"attributes":{"category":"technical","framework":"nist-800-53","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/nist-800-53/","description":"Identification and Authentication (Organizational Users)","details":{"automation":"automated","control_category":"technical","control_id":"IA-2","control_type":"preventive","domains":["Access Control & Identity Management"],"framework":"nist-800-53","group":"Identification and Authentication","key_control":true,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-nist-800-53-ia-2-081cfd11.html","id":"ctrl:nist-800-53:IA-2","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Anist-800-53%3AIA-2","sourceIds":["nist-800-53"],"sourceUrl":null,"title":"IA-2 — Identification and Authentication (Organizational Users)","type":"control","url":"/assets/agent_record-ctrl-nist-800-53-ia-2-081cfd11.8ca2970d2650be47.json"},{"attributes":{"category":"technical","framework":"nist-800-53","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/nist-800-53/","description":"Identification and Authentication (Non-organizational Users)","details":{"automation":"automated","control_category":"technical","control_id":"IA-8","control_type":"preventive","domains":["Access Control & Identity Management"],"framework":"nist-800-53","group":"Identification and Authentication","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-nist-800-53-ia-8-b6acedd3.html","id":"ctrl:nist-800-53:IA-8","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Anist-800-53%3AIA-8","sourceIds":["nist-800-53"],"sourceUrl":null,"title":"IA-8 — Identification and Authentication (Non-organizational Users)","type":"control","url":"/assets/agent_record-ctrl-nist-800-53-ia-8-b6acedd3.8e8930b0f5a6eecb.json"},{"attributes":{"category":"administrative","framework":"nist-800-53","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/nist-800-53/","description":"Security and Privacy Workforce","details":{"automation":"manual","control_category":"administrative","control_id":"PM-13","control_type":"preventive","domains":["Awareness & Training"],"framework":"nist-800-53","group":"Program Management","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-nist-800-53-pm-13-bc63c843.html","id":"ctrl:nist-800-53:PM-13","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Anist-800-53%3APM-13","sourceIds":["nist-800-53"],"sourceUrl":null,"title":"PM-13 — Security and Privacy Workforce","type":"control","url":"/assets/agent_record-ctrl-nist-800-53-pm-13-bc63c843.c5a27ee46634936e.json"},{"attributes":{"category":"administrative","framework":"nist-800-53","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/nist-800-53/","description":"Consent","details":{"automation":"hybrid","control_category":"administrative","control_id":"PT-4","control_type":"preventive","domains":["Data Protection & Privacy"],"framework":"nist-800-53","group":"Personally Identifiable Information Processing and Transparency","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-nist-800-53-pt-4-c254ba98.html","id":"ctrl:nist-800-53:PT-4","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Anist-800-53%3APT-4","sourceIds":["nist-800-53"],"sourceUrl":null,"title":"PT-4 — Consent","type":"control","url":"/assets/agent_record-ctrl-nist-800-53-pt-4-c254ba98.582f9361a2db2d97.json"},{"attributes":{"category":"administrative","framework":"nist-800-53","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/nist-800-53/","description":"Privacy Notice","details":{"automation":"manual","control_category":"administrative","control_id":"PT-5","control_type":"preventive","domains":["Data Protection & Privacy"],"framework":"nist-800-53","group":"Personally Identifiable Information Processing and Transparency","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-nist-800-53-pt-5-87626c3c.html","id":"ctrl:nist-800-53:PT-5","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Anist-800-53%3APT-5","sourceIds":["nist-800-53"],"sourceUrl":null,"title":"PT-5 — Privacy Notice","type":"control","url":"/assets/agent_record-ctrl-nist-800-53-pt-5-87626c3c.b623b30f04d4e500.json"},{"attributes":{"category":"administrative","framework":"nist-800-53","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/nist-800-53/","description":"System of Records Notice","details":{"automation":"manual","control_category":"administrative","control_id":"PT-6","control_type":"preventive","domains":["Data Protection & Privacy"],"framework":"nist-800-53","group":"Personally Identifiable Information Processing and Transparency","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":4,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-nist-800-53-pt-6-97abd359.html","id":"ctrl:nist-800-53:PT-6","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Anist-800-53%3APT-6","sourceIds":["nist-800-53"],"sourceUrl":null,"title":"PT-6 — System of Records Notice","type":"control","url":"/assets/agent_record-ctrl-nist-800-53-pt-6-97abd359.b718e6aa28bf7a90.json"},{"attributes":{"category":"technical","framework":"nist-800-53","type":"detective"},"canonicalUrl":"https://controlsmap.com/frameworks/nist-800-53/","description":"System Monitoring","details":{"automation":"automated","control_category":"technical","control_id":"SI-4","control_type":"detective","domains":["Logging, Monitoring & Detection"],"framework":"nist-800-53","group":"System and Information Integrity","key_control":true,"requirement_frequency":null,"requirement_status":null,"risk_count":6,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-nist-800-53-si-4-6048a58e.html","id":"ctrl:nist-800-53:SI-4","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Anist-800-53%3ASI-4","sourceIds":["nist-800-53"],"sourceUrl":null,"title":"SI-4 — System Monitoring","type":"control","url":"/assets/agent_record-ctrl-nist-800-53-si-4-6048a58e.4ca8a0d2e67d93a7.json"},{"attributes":{"category":"technical","framework":"nist-ai-agent-identity","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/nist-ai-agent-identity/","description":"The proposed project explores tracking the provenance of user prompts and input data so that risk assessments and policies can take those sources into account when deciding whether an agent may act.","details":{"automation":"hybrid","control_category":"technical","control_id":"NIST-AGI-07","control_type":"preventive","domains":[],"framework":"nist-ai-agent-identity","group":"Agent Identity and Authorization Topics","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":0,"source_pages":"Concept paper p. 6: Tracking Data Flows of an AI System","source_url":"https://www.nccoe.nist.gov/sites/default/files/2026-02/accelerating-the-adoption-of-software-and-ai-agent-identity-and-authorization-concept-paper.pdf#page=7","statement":"The proposed project explores tracking the provenance of user prompts and input data so that risk assessments and policies can take those sources into account when deciding whether an agent may act."},"direct":false,"htmlUrl":"/agents/records/ctrl-nist-ai-agent-identity-nist-agi-07-e4ca7bdd.html","id":"ctrl:nist-ai-agent-identity:NIST-AGI-07","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Anist-ai-agent-identity%3ANIST-AGI-07","sourceIds":["nist-ai-agent-identity"],"sourceUrl":"https://www.nccoe.nist.gov/sites/default/files/2026-02/accelerating-the-adoption-of-software-and-ai-agent-identity-and-authorization-concept-paper.pdf#page=7","title":"NIST-AGI-07 — Prompt provenance and data-flow tracking","type":"control","url":"/assets/agent_record-ctrl-nist-ai-agent-identity-nist-agi-07-e4ca7bdd.b74948b1c9c1a38c.json"},{"attributes":{"category":"technical","framework":"nist-ai-tevv-athlon","type":"detective"},"canonicalUrl":"https://controlsmap.com/frameworks/nist-ai-tevv-athlon/","description":"Appendix B includes confidentiality attacks that test whether an AI system reveals confidential information or internal functionality, including user information and system-prompt leakage.","details":{"automation":"hybrid","control_category":"technical","control_id":"NIST-TEVV-04","control_type":"detective","domains":[],"framework":"nist-ai-tevv-athlon","group":"AI Evaluation and Agent Security Testing","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":0,"source_pages":"NIST AI 200-2 ipd Appendix B, Table 4, p. 24: Confidentiality attacks","source_url":"https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.200-2.ipd.pdf#page=32","statement":"Appendix B includes confidentiality attacks that test whether an AI system reveals confidential information or internal functionality, including user information and system-prompt leakage."},"direct":false,"htmlUrl":"/agents/records/ctrl-nist-ai-tevv-athlon-nist-tevv-04-14e991d6.html","id":"ctrl:nist-ai-tevv-athlon:NIST-TEVV-04","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Anist-ai-tevv-athlon%3ANIST-TEVV-04","sourceIds":["nist-ai-tevv-athlon"],"sourceUrl":"https://nvlpubs.nist.gov/nistpubs/ai/NIST.AI.200-2.ipd.pdf#page=32","title":"NIST-TEVV-04 — Test for disclosure of confidential information","type":"control","url":"/assets/agent_record-ctrl-nist-ai-tevv-athlon-nist-tevv-04-14e991d6.a25001afa53f6355.json"},{"attributes":{"category":"technical","framework":"nist-csf-2","type":"detective"},"canonicalUrl":"https://controlsmap.com/frameworks/nist-csf-2/","description":"Continuous Monitoring: Networks and network services are monitored to find potentially adverse events","details":{"automation":"automated","control_category":"technical","control_id":"DE.CM-01","control_type":"detective","domains":["Logging, Monitoring & Detection","Network & Communications Security"],"framework":"nist-csf-2","group":"Detect","key_control":true,"requirement_frequency":null,"requirement_status":null,"risk_count":6,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-nist-csf-2-de-cm-01-5a17881e.html","id":"ctrl:nist-csf-2:DE.CM-01","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Anist-csf-2%3ADE.CM-01","sourceIds":["nist-csf-2"],"sourceUrl":null,"title":"DE.CM-01 — Continuous Monitoring: Networks and network services are monitored to find potentially adverse events","type":"control","url":"/assets/agent_record-ctrl-nist-csf-2-de-cm-01-5a17881e.75c611629309d68b.json"}],"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0269eb8cfcba6d10d998d6d76202c7be9af2113255864ff2d1c29bcbfc10ab6a","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-nist-800-53-pm-13-bc63c843.json","sourceId":"ctrl:nist-800-53:PM-13","targetDetailPath":"/data/v1/records/std-nist-800-53-94591ee2.json","targetId":"std:nist-800-53","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:043f2c6db127eb3720fbb6fe0ef5fc523b3a1ca7932e0d7f97f882f62693315a","properties":{"control_id":"AC-14","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-access-14-99fd72b5.json","sourceId":"uc:UC-ACCESS-14","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-ac-14-f34116e8.json","targetId":"ctrl:nist-800-53:AC-14","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:046ade0a8ee9f1acbd8a40a19f3a1fa742483ed0f2c87bfe975bf838d4a6e641","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-hipaa-hipaa-164-312-d-d1e8fe74.json","sourceId":"ctrl:hipaa:HIPAA-164.312(d)","targetDetailPath":"/data/v1/records/std-hipaa-a825d271.json","targetId":"std:hipaa","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0fe517ac637e10c720b703e9d808b32e990c28f139df07023874cdc339e6d842","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-nist-800-53-pt-6-97abd359.json","sourceId":"ctrl:nist-800-53:PT-6","targetDetailPath":"/data/v1/records/std-nist-800-53-94591ee2.json","targetId":"std:nist-800-53","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:1034a1bf8aadb88c03724051eb8a21ece1a44c8b14c592c16dc9039e08476a12","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-gdpr-gdpr-art44-49-8ad28202.json","sourceId":"ctrl:gdpr:GDPR-Art44-49","targetDetailPath":"/data/v1/records/std-gdpr-17d65d0b.json","targetId":"std:gdpr","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:147626ba946de1899cd5ca17cf9b036bdbfe4f62009292be05b5143cb0cdec82","properties":{"control_id":"GDPR-Art7","coverage":"full","delta":null,"framework":"gdpr","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Regulation (EU) 2016/679"},"sourceDetailPath":"/data/v1/records/uc-uc-data-02-56e3d60a.json","sourceId":"uc:UC-DATA-02","targetDetailPath":"/data/v1/records/ctrl-gdpr-gdpr-art7-218fdd35.json","targetId":"ctrl:gdpr:GDPR-Art7","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:151c6358382dbbca56287fa96b5e2f91eda2817b774910275f3b508306cd9bfe","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-aiuc-1-a005-12903764.json","sourceId":"ctrl:aiuc-1:A005","targetDetailPath":"/data/v1/records/std-aiuc-1-d2a8b650.json","targetId":"std:aiuc-1","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:1e79429de3320b76a968440384d36df9ffafa119e92c80ba0a677397ff202c61","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-nist-800-53-ia-2-081cfd11.json","sourceId":"ctrl:nist-800-53:IA-2","targetDetailPath":"/data/v1/records/std-nist-800-53-94591ee2.json","targetId":"std:nist-800-53","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:21baa02f63b58872be3376d300780e39d7371ce87049afde2bd305be4d9a7f65","properties":{"control_id":"PT-5","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-data-05-3244ac25.json","sourceId":"uc:UC-DATA-05","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-pt-5-87626c3c.json","targetId":"ctrl:nist-800-53:PT-5","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:23eaa3883aafaf4f62624a04e3fd732b7da68d43bba59115191432f3b4e97ccf","properties":{"control_id":"AU-14","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-log-07-659fa92d.json","sourceId":"uc:UC-LOG-07","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-au-14-51fc93b2.json","targetId":"ctrl:nist-800-53:AU-14","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:296e9390194eab0164131a3521fe32f15aab47e62269daccb772e914d46f04fc","properties":{"control_id":"SI-4","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-log-04-4bc40d21.json","sourceId":"uc:UC-LOG-04","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-si-4-6048a58e.json","targetId":"ctrl:nist-800-53:SI-4","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:29778728a957a7df14ccd155500df958be12445dcbd26bbbedf821682c336448","properties":{"control_id":"A.8.5","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-access-09-444baafe.json","sourceId":"uc:UC-ACCESS-09","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-8-5-4c63b8ae.json","targetId":"ctrl:iso-27001:A.8.5","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:299a71aeeee59776f5b1a4c8f9fcfda488340adee65b5850e013858a95e1eada","properties":{"control_id":"A.6.7","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"equal","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-hr-07-7b9726ca.json","sourceId":"uc:UC-HR-07","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-6-7-74bc3cd8.json","targetId":"ctrl:iso-27001:A.6.7","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:305cf28ed05c6df9dac09ebea3a0c97f29f64b6088f6f9cd012687e2792f278d","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-nist-800-53-ia-12-87eb72e6.json","sourceId":"ctrl:nist-800-53:IA-12","targetDetailPath":"/data/v1/records/std-nist-800-53-94591ee2.json","targetId":"std:nist-800-53","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3779d37740ab4093d5350e29113e0cfd004724773daa5ea2c106899f2f5fa851","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-ccpa-ccpa-1798-120-121-7655ba5c.json","sourceId":"ctrl:ccpa:CCPA-1798.120-121","targetDetailPath":"/data/v1/records/std-ccpa-55f3fd20.json","targetId":"std:ccpa","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:39ba831adcb789e31ed1c2a108d886bd4232ca89968b0be5c4a70945c663fa9b","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-8-12-8310e795.json","sourceId":"ctrl:iso-27001:A.8.12","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:42d286674fc7989f1380ed6971316111654e72a8e9a57d828f4ffceef1722eae","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-nist-800-53-si-4-6048a58e.json","sourceId":"ctrl:nist-800-53:SI-4","targetDetailPath":"/data/v1/records/std-nist-800-53-94591ee2.json","targetId":"std:nist-800-53","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:46649b5491420104088389b6488bcc81c25e0f04301e1b993c9c416d4ab952b2","properties":{"control_id":"GDPR-Art44-49","coverage":"full","delta":null,"framework":"gdpr","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Regulation (EU) 2016/679"},"sourceDetailPath":"/data/v1/records/uc-uc-data-11-baf71fe4.json","sourceId":"uc:UC-DATA-11","targetDetailPath":"/data/v1/records/ctrl-gdpr-gdpr-art44-49-8ad28202.json","targetId":"ctrl:gdpr:GDPR-Art44-49","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:47e7254b134d02e46330981d7e98ece1852cfb7a4f52d47281795ea60377073a","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-nist-800-53-ac-7-b8145c2d.json","sourceId":"ctrl:nist-800-53:AC-7","targetDetailPath":"/data/v1/records/std-nist-800-53-94591ee2.json","targetId":"std:nist-800-53","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4b03d6dec92c091438d0a590015df5a172bbe771684b811c56a7999c7cce4ba2","properties":{"control_id":"AC-7","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-access-11-d0c7a1b8.json","sourceId":"uc:UC-ACCESS-11","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-ac-7-b8145c2d.json","targetId":"ctrl:nist-800-53:AC-7","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:548b8ad8c62f891a3889c91ed1f8b2b6b89ccec320583ffd20ee385768763b16","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-nist-800-53-ac-22-b3b8bc68.json","sourceId":"ctrl:nist-800-53:AC-22","targetDetailPath":"/data/v1/records/std-nist-800-53-94591ee2.json","targetId":"std:nist-800-53","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:5ea9a605ea5162b98dfaf780e8acd3f3d613562504140ed2fa84d3b38f3d46c0","properties":{"control_id":"A.8.6","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-access-18-8ffbd456.json","sourceId":"uc:UC-ACCESS-18","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-8-6-d9abb4dc.json","targetId":"ctrl:iso-27001:A.8.6","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:5f9c9f2ee7a7058784c62630d6e9a3e22633f6949103ed9b8518bb0d429377e6","properties":{"control_id":"HIPAA-164.312(d)","coverage":"full","delta":null,"framework":"hipaa","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"45 CFR Parts 160/164 (Security, Privacy, Breach Notification)"},"sourceDetailPath":"/data/v1/records/uc-uc-access-09-444baafe.json","sourceId":"uc:UC-ACCESS-09","targetDetailPath":"/data/v1/records/ctrl-hipaa-hipaa-164-312-d-d1e8fe74.json","targetId":"ctrl:hipaa:HIPAA-164.312(d)","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:60656af39e5efdd590728857fde49ca2a95f3892cc4a55b7f9d8b342e62460fc","properties":{"control_id":"DE.CM-01","coverage":"full","delta":null,"framework":"nist-csf-2","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2.0"},"sourceDetailPath":"/data/v1/records/uc-uc-log-04-4bc40d21.json","sourceId":"uc:UC-LOG-04","targetDetailPath":"/data/v1/records/ctrl-nist-csf-2-de-cm-01-5a17881e.json","targetId":"ctrl:nist-csf-2:DE.CM-01","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:61ab6cde6d899b2ba90748f2ccbfecd5f4955ab12b3f3601465f3272cad5e304","properties":{"control_id":"B003","coverage":"partial","delta":"controlled public release of model, system-prompt, and architecture details so technical over-disclosure does not aid adversaries","framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-access-14-99fd72b5.json","sourceId":"uc:UC-ACCESS-14","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-b003-8c740cc9.json","targetId":"ctrl:aiuc-1:B003","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:639af74f867207985c0d330720da0b18bcbac5a07f9e93504c9405e222505aca","properties":{"control_id":"A005","coverage":"partial","delta":"tenant isolation inside AI systems: retrieval indexes, memory, fine-tuning data, and caches segregated so one customer's data cannot surface in another customer's outputs","framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-data-11-baf71fe4.json","sourceId":"uc:UC-DATA-11","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-a005-12903764.json","targetId":"ctrl:aiuc-1:A005","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:645145761f013ca04c1831e98ca3b504c35a0f293d7c368c1de247b004afb47b","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-8-5-4c63b8ae.json","sourceId":"ctrl:iso-27001:A.8.5","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:65d30c22f953527bb1c0ffd6dd41e01c128ea2daa63827fa46aee4d228036e73","properties":{"control_id":"IA-12","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-access-07-ed06e251.json","sourceId":"uc:UC-ACCESS-07","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-ia-12-87eb72e6.json","targetId":"ctrl:nist-800-53:IA-12","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:6663c31b9b165fa27127bd92c127a2817e550fa5f05670e4f98d1ea7cee1d021","properties":{"control_id":"IA-8","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-access-09-444baafe.json","sourceId":"uc:UC-ACCESS-09","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-ia-8-b6acedd3.json","targetId":"ctrl:nist-800-53:IA-8","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:6ae5c841ca0a80aafe3bd89c7d33e8dd6c34975115885a0f706151c53cbbdc7c","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-nist-800-53-pt-4-c254ba98.json","sourceId":"ctrl:nist-800-53:PT-4","targetDetailPath":"/data/v1/records/std-nist-800-53-94591ee2.json","targetId":"std:nist-800-53","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:6c1846fb9812d3a66dd47cb08fabc59bc2947d21d3b9398e0ec8166b1e2f5445","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-aiuc-1-a004-0955d43a.json","sourceId":"ctrl:aiuc-1:A004","targetDetailPath":"/data/v1/records/std-aiuc-1-d2a8b650.json","targetId":"std:aiuc-1","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:6dcd9f1d4267fe9988ac500ca9fc699acc0eb150aa0c7a14962293e41a2f6336","properties":{"control_id":"PT-4","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-data-02-56e3d60a.json","sourceId":"uc:UC-DATA-02","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-pt-4-c254ba98.json","targetId":"ctrl:nist-800-53:PT-4","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:70081ea4eb13d7d16bfbbf89a74550126570253d10451979276233dce6a37009","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-gdpr-gdpr-art12-14-51a7eca7.json","sourceId":"ctrl:gdpr:GDPR-Art12-14","targetDetailPath":"/data/v1/records/std-gdpr-17d65d0b.json","targetId":"std:gdpr","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:75876308e3e0d55597a021040d43adfd1437f30d5b2ff2135f610b0952f961e0","properties":{"control_id":"AC-21","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-access-14-99fd72b5.json","sourceId":"uc:UC-ACCESS-14","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-ac-21-b2e5ceab.json","targetId":"ctrl:nist-800-53:AC-21","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:77a886da57af2fdca7f194c4bff5074c52422db3dccf311db1e9c540d63fcea7","properties":{"control_id":"NIST-TEVV-04","coverage":"guidance","delta":null,"framework":"nist-ai-tevv-athlon","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"informs","sourcePages":"NIST AI 200-2 ipd Appendix B, Table 4, p. 24: Confidentiality attacks","source_version":"NIST AI 200-2 ipd (Initial Public Draft), August 2026"},"sourceDetailPath":"/data/v1/records/uc-uc-data-11-baf71fe4.json","sourceId":"uc:UC-DATA-11","targetDetailPath":"/data/v1/records/ctrl-nist-ai-tevv-athlon-nist-tevv-04-14e991d6.json","targetId":"ctrl:nist-ai-tevv-athlon:NIST-TEVV-04","type":"informed_by"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7839f0f6509978e297122f87fd02a5d5b56a4672ccf7e32b1cad6e3c6df3d1d3","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-nist-ai-tevv-athlon-nist-tevv-04-14e991d6.json","sourceId":"ctrl:nist-ai-tevv-athlon:NIST-TEVV-04","targetDetailPath":"/data/v1/records/std-nist-ai-tevv-athlon-c008775c.json","targetId":"std:nist-ai-tevv-athlon","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:79eff9273f79143b6398cfbda69f47579dc0ad6193385ab69e0a9ac037a7c5fe","properties":{"control_id":"CCPA-1798.120-121","coverage":"partial","delta":"under-16 opt-in consent before selling/sharing minors' data not addressed","framework":"ccpa","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"CCPA (2018) as amended by CPRA (2020)"},"sourceDetailPath":"/data/v1/records/uc-uc-data-02-56e3d60a.json","sourceId":"uc:UC-DATA-02","targetDetailPath":"/data/v1/records/ctrl-ccpa-ccpa-1798-120-121-7655ba5c.json","targetId":"ctrl:ccpa:CCPA-1798.120-121","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7b6a4913a1b420a6f6cc2390f61234857743d8d73545eea202c1e45dca99764b","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-nist-800-53-at-6-28585f3f.json","sourceId":"ctrl:nist-800-53:AT-6","targetDetailPath":"/data/v1/records/std-nist-800-53-94591ee2.json","targetId":"std:nist-800-53","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7d3d8621f5beef92080b8777a791ec58c1dac1c601e0bfaad1e6b2edef600b06","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-nist-800-53-ac-4-803f5fce.json","sourceId":"ctrl:nist-800-53:AC-4","targetDetailPath":"/data/v1/records/std-nist-800-53-94591ee2.json","targetId":"std:nist-800-53","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:8128919760953d7828feeb87b5db14481385836b29b030959426bbee184dcbf5","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-gdpr-gdpr-art7-218fdd35.json","sourceId":"ctrl:gdpr:GDPR-Art7","targetDetailPath":"/data/v1/records/std-gdpr-17d65d0b.json","targetId":"std:gdpr","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:838acb68e5edfaa0371e73a93223c2f4b3eb67d38a4f0e5cc32f8e51aee7b4c3","properties":{"control_id":"GDPR-Art12-14","coverage":"partial","delta":"controller/DPO identity, complaint right, transfer info, automated-decision disclosures, Art 14 source omitted","framework":"gdpr","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"Regulation (EU) 2016/679"},"sourceDetailPath":"/data/v1/records/uc-uc-data-05-3244ac25.json","sourceId":"uc:UC-DATA-05","targetDetailPath":"/data/v1/records/ctrl-gdpr-gdpr-art12-14-51a7eca7.json","targetId":"ctrl:gdpr:GDPR-Art12-14","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:855236ef33984e8f75ef0fb35a489279f0c712fd2690cbcb032d78729cc7ab6f","properties":{"control_id":"AC-22","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-access-14-99fd72b5.json","sourceId":"uc:UC-ACCESS-14","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-ac-22-b3b8bc68.json","targetId":"ctrl:nist-800-53:AC-22","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:8ba1fcd2dce54d62b11512c22b5f9ff1de51a9fb9f041e24912fc85eded145cd","properties":{"control_id":"A.8.12","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-data-11-baf71fe4.json","sourceId":"uc:UC-DATA-11","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-8-12-8310e795.json","targetId":"ctrl:iso-27001:A.8.12","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:8c3536bb1640ece9aa7c6e90933b60f0de83200fbc6c5beb372d91d19df26435","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-nist-800-53-at-3-003c8052.json","sourceId":"ctrl:nist-800-53:AT-3","targetDetailPath":"/data/v1/records/std-nist-800-53-94591ee2.json","targetId":"std:nist-800-53","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:8ff93d7e4e334d9453ecbad99b8cd3527f3de070de51c8adc3daad60b069d2b6","properties":{"control_id":"A.6.3","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-train-01-5f513831.json","sourceId":"uc:UC-TRAIN-01","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-6-3-b9bb8fbd.json","targetId":"ctrl:iso-27001:A.6.3","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:914fafede5d8ad85fc3020de74b4dd793a5d95525110d79ce2836af7671fa379","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-8-16-ca49cbfe.json","sourceId":"ctrl:iso-27001:A.8.16","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:93d3de6f3a8a86c480d9312157b8368a234de262365ef6c0a91ba280d32fa3c2","properties":{"control_id":"AC-4","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-data-11-baf71fe4.json","sourceId":"uc:UC-DATA-11","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-ac-4-803f5fce.json","targetId":"ctrl:nist-800-53:AC-4","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:93ff6b6daac2b277c1b584759bee71a8dcfdba5ab7d9040d887d2bf97f2b54f4","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-nist-ai-agent-identity-nist-agi-07-e4ca7bdd.json","sourceId":"ctrl:nist-ai-agent-identity:NIST-AGI-07","targetDetailPath":"/data/v1/records/std-nist-ai-agent-identity-5c357655.json","targetId":"std:nist-ai-agent-identity","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:985a5440dadf75eb79883d674ef43dd30259271ae6623cd5b1ded6eb4dd4839f","properties":{"control_id":"HIPAA-164.508","coverage":"partial","delta":"when authorization is mandatory (marketing, sale of PHI, psychotherapy notes) not established","framework":"hipaa","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"45 CFR Parts 160/164 (Security, Privacy, Breach Notification)"},"sourceDetailPath":"/data/v1/records/uc-uc-data-02-56e3d60a.json","sourceId":"uc:UC-DATA-02","targetDetailPath":"/data/v1/records/ctrl-hipaa-hipaa-164-508-208be590.json","targetId":"ctrl:hipaa:HIPAA-164.508","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:98e288190a80f4b9684f719b462f304e3ad2604643cf30159ec607b9f18aa498","properties":{"control_id":"A004","coverage":"partial","delta":"leakage of intellectual property and confidential information through AI system outputs, requiring model-output safeguards beyond network and channel flow controls","framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-data-11-baf71fe4.json","sourceId":"uc:UC-DATA-11","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-a004-0955d43a.json","targetId":"ctrl:aiuc-1:A004","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:9d1cdd473d9ce40d2bd112f51ac9790c817cc792769506c9705c283b90d6b464","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-nist-800-53-ac-21-b2e5ceab.json","sourceId":"ctrl:nist-800-53:AC-21","targetDetailPath":"/data/v1/records/std-nist-800-53-94591ee2.json","targetId":"std:nist-800-53","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:9e33604ad097e8a28ce939d3a004ca175363cc5952d2d1035eab595b1624721c","properties":{"control_id":"IA-2","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-access-09-444baafe.json","sourceId":"uc:UC-ACCESS-09","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-ia-2-081cfd11.json","targetId":"ctrl:nist-800-53:IA-2","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a306191484e064184a32a2288870f1db77fce30cf40f37506d571daa159e0c64","properties":{"control_id":"PM-13","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-train-02-88898a0b.json","sourceId":"uc:UC-TRAIN-02","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-pm-13-bc63c843.json","targetId":"ctrl:nist-800-53:PM-13","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a663d636ace716e1441d87cd25897840f98c0c489bea339a8e1d75115860ac39","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-6-3-b9bb8fbd.json","sourceId":"ctrl:iso-27001:A.6.3","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b50bbf8c9151fb9ceac47f588664ecd9001b4cadbf208f9d2694e277952cb2bb","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-hipaa-hipaa-164-520-e2735a22.json","sourceId":"ctrl:hipaa:HIPAA-164.520","targetDetailPath":"/data/v1/records/std-hipaa-a825d271.json","targetId":"std:hipaa","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:bf8fbdcb6b595ec8b42bfc9e5fa5f080efc5ae864aa1493692275cb3b0f86ba0","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-hipaa-hipaa-164-508-208be590.json","sourceId":"ctrl:hipaa:HIPAA-164.508","targetDetailPath":"/data/v1/records/std-hipaa-a825d271.json","targetId":"std:hipaa","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c437dc8c86ab106f3e2b742cf93b153d2d7f7dee2d450d53c59e6f5455f46456","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-8-6-d9abb4dc.json","sourceId":"ctrl:iso-27001:A.8.6","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c5e343da88e7cad219e4ad0e373a945da75f672d6cf35a70d1981b80e25d3bff","properties":{"control_id":"AT-3","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-train-02-88898a0b.json","sourceId":"uc:UC-TRAIN-02","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-at-3-003c8052.json","targetId":"ctrl:nist-800-53:AT-3","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c9304276963b8cebed4157199a87c0fea07b8f6ec3f954c32a61412b3c03ec8b","properties":{"control_id":"PT-6","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-data-05-3244ac25.json","sourceId":"uc:UC-DATA-05","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-pt-6-97abd359.json","targetId":"ctrl:nist-800-53:PT-6","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c9b56b522103a9e2058d348f29e7310fbea325891d96d3dfc12fd9c3cb75b10d","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-nist-800-53-ia-10-ee664ad9.json","sourceId":"ctrl:nist-800-53:IA-10","targetDetailPath":"/data/v1/records/std-nist-800-53-94591ee2.json","targetId":"std:nist-800-53","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ccb62ac164a551e909b6db420a6d5ab5569bcf6756c7a5d4540004eadb0f8ac7","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-nist-800-53-ia-8-b6acedd3.json","sourceId":"ctrl:nist-800-53:IA-8","targetDetailPath":"/data/v1/records/std-nist-800-53-94591ee2.json","targetId":"std:nist-800-53","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ccd42bc2159369288be380b381f6b7245fb043acff866634af74660097fb589d","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-ccpa-ccpa-1798-100-b353d024.json","sourceId":"ctrl:ccpa:CCPA-1798.100","targetDetailPath":"/data/v1/records/std-ccpa-55f3fd20.json","targetId":"std:ccpa","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ce56784ca83fe4d52b79ac9aeb0ca07108d726ac4169120c6f001df4864395df","properties":{"control_id":"AT-6","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-train-03-7125ac3e.json","sourceId":"uc:UC-TRAIN-03","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-at-6-28585f3f.json","targetId":"ctrl:nist-800-53:AT-6","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d66cb066a39fc2d40526e7f96dc2d5647618012ce4c261564499382f729da947","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-nist-800-53-at-4-3f2a5df3.json","sourceId":"ctrl:nist-800-53:AT-4","targetDetailPath":"/data/v1/records/std-nist-800-53-94591ee2.json","targetId":"std:nist-800-53","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d8fe8176e92760aee02eb486cd4dd3d1188788b093d5b3607fbb9b89c0cd8b99","properties":{"control_id":"CCPA-1798.100","coverage":"partial","delta":"beyond notice-at-collection: 1798.100 general duties (purpose limitation, reasonable security, contractor requirements) and verified right-to-know fulfillment satisfied by companion privacy-rights and security controls","framework":"ccpa","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"CCPA (2018) as amended by CPRA (2020)"},"sourceDetailPath":"/data/v1/records/uc-uc-data-05-3244ac25.json","sourceId":"uc:UC-DATA-05","targetDetailPath":"/data/v1/records/ctrl-ccpa-ccpa-1798-100-b353d024.json","targetId":"ctrl:ccpa:CCPA-1798.100","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:da9bcb3a6dfe288d45c6538847a7cd11e1dabcd494b7b1eb41d9fe37e9ea37cd","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-nist-800-53-ca-7-a6cb4db3.json","sourceId":"ctrl:nist-800-53:CA-7","targetDetailPath":"/data/v1/records/std-nist-800-53-94591ee2.json","targetId":"std:nist-800-53","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:db5763c540f39e6a6769a92931c66561b81ada24ceb1a3aa1ceb13d1f24ac749","properties":{"control_id":"AT-2","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-train-01-5f513831.json","sourceId":"uc:UC-TRAIN-01","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-at-2-8a8c6b57.json","targetId":"ctrl:nist-800-53:AT-2","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:dfb6dd948a5587f84f5e59de0b4e004382f12cd8fc046a01349533f8bb269fa4","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-nist-800-53-pt-5-87626c3c.json","sourceId":"ctrl:nist-800-53:PT-5","targetDetailPath":"/data/v1/records/std-nist-800-53-94591ee2.json","targetId":"std:nist-800-53","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e1fe81feb49884bb34ed6e072a25b85c8be16d038978d7656a5f138ac2de282f","properties":{"control_id":"IA-10","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-access-11-d0c7a1b8.json","sourceId":"uc:UC-ACCESS-11","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-ia-10-ee664ad9.json","targetId":"ctrl:nist-800-53:IA-10","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e4a9fbc0682a1e46b6ed7f9026a719b6dfe77fbc2505e9bf17488c9f1815c99d","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-nist-800-53-au-14-51fc93b2.json","sourceId":"ctrl:nist-800-53:AU-14","targetDetailPath":"/data/v1/records/std-nist-800-53-94591ee2.json","targetId":"std:nist-800-53","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ebe63e0da6bcd5233f014720ffaece24f7a29f8d96566cd8e7a8c525ffb8dc55","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-nist-800-53-ac-14-f34116e8.json","sourceId":"ctrl:nist-800-53:AC-14","targetDetailPath":"/data/v1/records/std-nist-800-53-94591ee2.json","targetId":"std:nist-800-53","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ee20675c86e4c205a7a41d34af025b022b06043a6808b05a10d7d7becede82f3","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-nist-csf-2-de-cm-01-5a17881e.json","sourceId":"ctrl:nist-csf-2:DE.CM-01","targetDetailPath":"/data/v1/records/std-nist-csf-2-c5e53008.json","targetId":"std:nist-csf-2","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ee4bd0b0aeceb95a424afa36ad02e6d4451caa9c510d9f33e0677397d55ea5fa","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-iso-27001-a-6-7-74bc3cd8.json","sourceId":"ctrl:iso-27001:A.6.7","targetDetailPath":"/data/v1/records/std-iso-27001-656201bd.json","targetId":"std:iso-27001","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:efbecca0067d4b5e71855e96df269f75abb2c761110802fdd48ee12236e59f31","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-aiuc-1-b003-8c740cc9.json","sourceId":"ctrl:aiuc-1:B003","targetDetailPath":"/data/v1/records/std-aiuc-1-d2a8b650.json","targetId":"std:aiuc-1","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f74789599108a608e3fa1425b30b855c41cf0b279432fad6976ef6927fc40eb5","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-nist-800-53-at-2-8a8c6b57.json","sourceId":"ctrl:nist-800-53:AT-2","targetDetailPath":"/data/v1/records/std-nist-800-53-94591ee2.json","targetId":"std:nist-800-53","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:fb186e243e2e1fe03b9317a3e8c9db240c9f551928cd60e4775e7899ae8cd547","properties":{"control_id":"A.8.16","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-log-04-4bc40d21.json","sourceId":"uc:UC-LOG-04","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-8-16-ca49cbfe.json","targetId":"ctrl:iso-27001:A.8.16","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:fbbd0dcfdd8c9aa3e68221ba809794838d36c34b66b5794d6d87cb634894f6ad","properties":{"control_id":"HIPAA-164.520","coverage":"partial","delta":"NPP-specific content (header, complaint process, duties, effective date) and acknowledgment mechanics omitted","framework":"hipaa","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"45 CFR Parts 160/164 (Security, Privacy, Breach Notification)"},"sourceDetailPath":"/data/v1/records/uc-uc-data-05-3244ac25.json","sourceId":"uc:UC-DATA-05","targetDetailPath":"/data/v1/records/ctrl-hipaa-hipaa-164-520-e2735a22.json","targetId":"ctrl:hipaa:HIPAA-164.520","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:fc047f252dcbbfd5aa07f2c888ae642ab75ca6ff2d1f964fe0bb94d23fbbcfa1","properties":{"control_id":"AT-4","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-train-03-7125ac3e.json","sourceId":"uc:UC-TRAIN-03","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-at-4-3f2a5df3.json","targetId":"ctrl:nist-800-53:AT-4","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:fd7cf66194a1b69535d3c8ed0ba831b624eb537cbb3ad776783b86d545fe2e27","properties":{"control_id":"NIST-AGI-07","coverage":"guidance","delta":null,"framework":"nist-ai-agent-identity","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"informs","sourcePages":"Concept paper p. 6: Tracking Data Flows of an AI System","source_version":"February 2026 draft concept paper"},"sourceDetailPath":"/data/v1/records/uc-uc-data-11-baf71fe4.json","sourceId":"uc:UC-DATA-11","targetDetailPath":"/data/v1/records/ctrl-nist-ai-agent-identity-nist-agi-07-e4ca7bdd.json","targetId":"ctrl:nist-ai-agent-identity:NIST-AGI-07","type":"informed_by"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:fddb5d92074b08d62c7a1752633b166cbf10867d3f2a39bbdecc70ceabf02c64","properties":{"control_id":"CA-7","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-log-04-4bc40d21.json","sourceId":"uc:UC-LOG-04","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-ca-7-a6cb4db3.json","targetId":"ctrl:nist-800-53:CA-7","type":"maps_to"}],"schemaVersion":1,"scope":"topics","total":139}