{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","contextIds":["ctrl:aiuc-1:A001","ctrl:aiuc-1:A002","ctrl:aiuc-1:A007","ctrl:aiuc-1:B006","ctrl:aiuc-1:C001","ctrl:aiuc-1:C007","ctrl:aiuc-1:C008","ctrl:aiuc-1:C009","ctrl:aiuc-1:D003","ctrl:aiuc-1:E001","ctrl:aiuc-1:E002","ctrl:aiuc-1:E003","ctrl:aiuc-1:E004","ctrl:aiuc-1:E006","ctrl:aiuc-1:E008","ctrl:aiuc-1:E010","ctrl:aiuc-1:E012","ctrl:aiuc-1:E013","ctrl:aiuc-1:E015","ctrl:aiuc-1:E016","ctrl:aiuc-1:E017","ctrl:ccpa:CCPA-1798.140","ctrl:ccpa:CCPA-1798.185","ctrl:cobit-2019:APO01","ctrl:cobit-2019:APO02","ctrl:cobit-2019:APO03","ctrl:cobit-2019:APO04","ctrl:cobit-2019:APO05","ctrl:cobit-2019:APO06","ctrl:cobit-2019:APO07","ctrl:cobit-2019:APO08","ctrl:cobit-2019:APO09","ctrl:cobit-2019:APO10","ctrl:cobit-2019:APO11","ctrl:cobit-2019:APO12","ctrl:cobit-2019:APO13","ctrl:cobit-2019:APO14","ctrl:cobit-2019:EDM01","ctrl:cobit-2019:EDM02","ctrl:cobit-2019:EDM03"],"directIds":[],"kind":"bundle","metadata":"/assets/agent_metadata.5c7612c9c5b0b455.json","name":"Governance, Policy & Oversight","next":"/assets/agent_topics-governance-policy-oversight-2.995fae96b436cbd7.json","page":1,"pageSize":40,"records":[{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/aiuc-1/","description":"Establish input data policy","details":{"automation":"manual","control_category":"administrative","control_id":"A001","control_type":"preventive","domains":["AI Governance","Data Protection & Privacy"],"framework":"aiuc-1","group":"Data & Privacy","key_control":false,"requirement_frequency":"Every 12 months","requirement_status":"mandatory","risk_count":4,"source_pages":null,"source_url":"https://www.aiuc-1.com/data-and-privacy/establish-data-use-policy"},"direct":false,"htmlUrl":"/agents/records/ctrl-aiuc-1-a001-a1b59a6f.html","id":"ctrl:aiuc-1:A001","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aaiuc-1%3AA001","sourceIds":["aiuc-1"],"sourceUrl":"https://www.aiuc-1.com/data-and-privacy/establish-data-use-policy","title":"A001 — Establish input data policy","type":"control","url":"/assets/agent_record-ctrl-aiuc-1-a001-a1b59a6f.52aaf838054ed2f8.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/aiuc-1/","description":"Establish output data policy","details":{"automation":"manual","control_category":"administrative","control_id":"A002","control_type":"preventive","domains":["AI Governance","Data Protection & Privacy"],"framework":"aiuc-1","group":"Data & Privacy","key_control":false,"requirement_frequency":"Every 12 months","requirement_status":"mandatory","risk_count":4,"source_pages":null,"source_url":"https://www.aiuc-1.com/data-and-privacy/define-output-rights"},"direct":false,"htmlUrl":"/agents/records/ctrl-aiuc-1-a002-1cad7f1d.html","id":"ctrl:aiuc-1:A002","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aaiuc-1%3AA002","sourceIds":["aiuc-1"],"sourceUrl":"https://www.aiuc-1.com/data-and-privacy/define-output-rights","title":"A002 — Establish output data policy","type":"control","url":"/assets/agent_record-ctrl-aiuc-1-a002-1cad7f1d.ddf0eb9bf347dc89.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/aiuc-1/","description":"Prevent IP violations","details":{"automation":"hybrid","control_category":"technical","control_id":"A007","control_type":"preventive","domains":["AI Governance","Data Protection & Privacy"],"framework":"aiuc-1","group":"Data & Privacy","key_control":false,"requirement_frequency":"Every 12 months","requirement_status":"mandatory","risk_count":7,"source_pages":null,"source_url":"https://www.aiuc-1.com/data-and-privacy/prevent-ip-violations"},"direct":false,"htmlUrl":"/agents/records/ctrl-aiuc-1-a007-c9925452.html","id":"ctrl:aiuc-1:A007","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aaiuc-1%3AA007","sourceIds":["aiuc-1"],"sourceUrl":"https://www.aiuc-1.com/data-and-privacy/prevent-ip-violations","title":"A007 — Prevent IP violations","type":"control","url":"/assets/agent_record-ctrl-aiuc-1-a007-c9925452.372b2a2223211842.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/aiuc-1/","description":"Prevent unauthorized AI agent actions","details":{"automation":"automated","control_category":"technical","control_id":"B006","control_type":"preventive","domains":["AI Governance","Access Control & Identity Management","Secure Development (SDLC) & Application Security"],"framework":"aiuc-1","group":"Security","key_control":false,"requirement_frequency":"Every 12 months","requirement_status":"mandatory","risk_count":4,"source_pages":null,"source_url":"https://www.aiuc-1.com/security/enforce-contextual-access-controls"},"direct":false,"htmlUrl":"/agents/records/ctrl-aiuc-1-b006-2951b397.html","id":"ctrl:aiuc-1:B006","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aaiuc-1%3AB006","sourceIds":["aiuc-1"],"sourceUrl":"https://www.aiuc-1.com/security/enforce-contextual-access-controls","title":"B006 — Prevent unauthorized AI agent actions","type":"control","url":"/assets/agent_record-ctrl-aiuc-1-b006-2951b397.7297d90ecea628f6.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/aiuc-1/","description":"Define AI risk taxonomy","details":{"automation":"manual","control_category":"administrative","control_id":"C001","control_type":"preventive","domains":["AI Governance"],"framework":"aiuc-1","group":"Safety","key_control":false,"requirement_frequency":"Every 12 months","requirement_status":"mandatory","risk_count":8,"source_pages":null,"source_url":"https://www.aiuc-1.com/safety/define-ai-risk-taxonomy"},"direct":false,"htmlUrl":"/agents/records/ctrl-aiuc-1-c001-6bc6c173.html","id":"ctrl:aiuc-1:C001","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aaiuc-1%3AC001","sourceIds":["aiuc-1"],"sourceUrl":"https://www.aiuc-1.com/safety/define-ai-risk-taxonomy","title":"C001 — Define AI risk taxonomy","type":"control","url":"/assets/agent_record-ctrl-aiuc-1-c001-6bc6c173.a628dce352165649.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/aiuc-1/","description":"Flag high risk outputs for human review","details":{"automation":"hybrid","control_category":"technical","control_id":"C007","control_type":"preventive","domains":["AI Governance"],"framework":"aiuc-1","group":"Safety","key_control":false,"requirement_frequency":"Every 12 months","requirement_status":"optional","risk_count":6,"source_pages":null,"source_url":"https://www.aiuc-1.com/safety/flag-high-risk-recommendations"},"direct":false,"htmlUrl":"/agents/records/ctrl-aiuc-1-c007-ebb82753.html","id":"ctrl:aiuc-1:C007","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aaiuc-1%3AC007","sourceIds":["aiuc-1"],"sourceUrl":"https://www.aiuc-1.com/safety/flag-high-risk-recommendations","title":"C007 — Flag high risk outputs for human review","type":"control","url":"/assets/agent_record-ctrl-aiuc-1-c007-ebb82753.1f08c7eaa4a4c4d2.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"detective"},"canonicalUrl":"https://controlsmap.com/frameworks/aiuc-1/","description":"Monitor AI risk categories","details":{"automation":"automated","control_category":"technical","control_id":"C008","control_type":"detective","domains":["AI Governance"],"framework":"aiuc-1","group":"Safety","key_control":false,"requirement_frequency":"Every 12 months","requirement_status":"optional","risk_count":6,"source_pages":null,"source_url":"https://www.aiuc-1.com/safety/monitor-ai-risk-categories"},"direct":false,"htmlUrl":"/agents/records/ctrl-aiuc-1-c008-94bd64f2.html","id":"ctrl:aiuc-1:C008","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aaiuc-1%3AC008","sourceIds":["aiuc-1"],"sourceUrl":"https://www.aiuc-1.com/safety/monitor-ai-risk-categories","title":"C008 — Monitor AI risk categories","type":"control","url":"/assets/agent_record-ctrl-aiuc-1-c008-94bd64f2.762375d4fb6f0a93.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/aiuc-1/","description":"Enable real-time feedback and intervention","details":{"automation":"hybrid","control_category":"technical","control_id":"C009","control_type":"preventive","domains":["AI Governance"],"framework":"aiuc-1","group":"Safety","key_control":false,"requirement_frequency":"Every 3 months","requirement_status":"optional","risk_count":6,"source_pages":null,"source_url":"https://www.aiuc-1.com/safety/collect-real-time-feedback"},"direct":false,"htmlUrl":"/agents/records/ctrl-aiuc-1-c009-d98e532e.html","id":"ctrl:aiuc-1:C009","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aaiuc-1%3AC009","sourceIds":["aiuc-1"],"sourceUrl":"https://www.aiuc-1.com/safety/collect-real-time-feedback","title":"C009 — Enable real-time feedback and intervention","type":"control","url":"/assets/agent_record-ctrl-aiuc-1-c009-d98e532e.55b27517a45129c1.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/aiuc-1/","description":"Restrict unsafe tool calls","details":{"automation":"automated","control_category":"technical","control_id":"D003","control_type":"preventive","domains":["AI Governance"],"framework":"aiuc-1","group":"Reliability","key_control":false,"requirement_frequency":"Every 12 months","requirement_status":"mandatory","risk_count":4,"source_pages":null,"source_url":"https://www.aiuc-1.com/reliability/restrict-unsafe-tool-calls"},"direct":false,"htmlUrl":"/agents/records/ctrl-aiuc-1-d003-9f8f52f3.html","id":"ctrl:aiuc-1:D003","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aaiuc-1%3AD003","sourceIds":["aiuc-1"],"sourceUrl":"https://www.aiuc-1.com/reliability/restrict-unsafe-tool-calls","title":"D003 — Restrict unsafe tool calls","type":"control","url":"/assets/agent_record-ctrl-aiuc-1-d003-9f8f52f3.26f93da8aadce30a.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/aiuc-1/","description":"AI failure plan for security breaches","details":{"automation":"manual","control_category":"administrative","control_id":"E001","control_type":"preventive","domains":["AI Governance","Governance, Policy & Oversight"],"framework":"aiuc-1","group":"Accountability","key_control":false,"requirement_frequency":"Every 12 months","requirement_status":"mandatory","risk_count":5,"source_pages":null,"source_url":"https://www.aiuc-1.com/accountability/ai-failure-plan-for-security-breaches"},"direct":false,"htmlUrl":"/agents/records/ctrl-aiuc-1-e001-ec2a2db9.html","id":"ctrl:aiuc-1:E001","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aaiuc-1%3AE001","sourceIds":["aiuc-1"],"sourceUrl":"https://www.aiuc-1.com/accountability/ai-failure-plan-for-security-breaches","title":"E001 — AI failure plan for security breaches","type":"control","url":"/assets/agent_record-ctrl-aiuc-1-e001-ec2a2db9.9b30235a7d4d4cfe.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/aiuc-1/","description":"AI failure plan for harmful outputs","details":{"automation":"manual","control_category":"administrative","control_id":"E002","control_type":"preventive","domains":["AI Governance","Governance, Policy & Oversight"],"framework":"aiuc-1","group":"Accountability","key_control":false,"requirement_frequency":"Every 12 months","requirement_status":"mandatory","risk_count":5,"source_pages":null,"source_url":"https://www.aiuc-1.com/accountability/ai-failure-plan-for-harmful-outputs"},"direct":false,"htmlUrl":"/agents/records/ctrl-aiuc-1-e002-aa262146.html","id":"ctrl:aiuc-1:E002","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aaiuc-1%3AE002","sourceIds":["aiuc-1"],"sourceUrl":"https://www.aiuc-1.com/accountability/ai-failure-plan-for-harmful-outputs","title":"E002 — AI failure plan for harmful outputs","type":"control","url":"/assets/agent_record-ctrl-aiuc-1-e002-aa262146.76084dbfb29721e5.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/aiuc-1/","description":"AI failure plan for hallucinations","details":{"automation":"manual","control_category":"administrative","control_id":"E003","control_type":"preventive","domains":["AI Governance","Governance, Policy & Oversight"],"framework":"aiuc-1","group":"Accountability","key_control":false,"requirement_frequency":"Every 12 months","requirement_status":"mandatory","risk_count":5,"source_pages":null,"source_url":"https://www.aiuc-1.com/accountability/ai-failure-plan-for-hallucinations"},"direct":false,"htmlUrl":"/agents/records/ctrl-aiuc-1-e003-2e1c73ec.html","id":"ctrl:aiuc-1:E003","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aaiuc-1%3AE003","sourceIds":["aiuc-1"],"sourceUrl":"https://www.aiuc-1.com/accountability/ai-failure-plan-for-hallucinations","title":"E003 — AI failure plan for hallucinations","type":"control","url":"/assets/agent_record-ctrl-aiuc-1-e003-2e1c73ec.1024f9b71bf6bb30.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/aiuc-1/","description":"Assign accountability","details":{"automation":"manual","control_category":"administrative","control_id":"E004","control_type":"preventive","domains":["AI Governance","Governance, Policy & Oversight"],"framework":"aiuc-1","group":"Accountability","key_control":false,"requirement_frequency":"Every 12 months","requirement_status":"mandatory","risk_count":3,"source_pages":null,"source_url":"https://www.aiuc-1.com/accountability/assign-accountability"},"direct":false,"htmlUrl":"/agents/records/ctrl-aiuc-1-e004-a07a7b59.html","id":"ctrl:aiuc-1:E004","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aaiuc-1%3AE004","sourceIds":["aiuc-1"],"sourceUrl":"https://www.aiuc-1.com/accountability/assign-accountability","title":"E004 — Assign accountability","type":"control","url":"/assets/agent_record-ctrl-aiuc-1-e004-a07a7b59.398fa008c10f3edf.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/aiuc-1/","description":"Conduct vendor due diligence","details":{"automation":"manual","control_category":"administrative","control_id":"E006","control_type":"preventive","domains":["AI Governance","Governance, Policy & Oversight"],"framework":"aiuc-1","group":"Accountability","key_control":false,"requirement_frequency":"Every 12 months","requirement_status":"mandatory","risk_count":5,"source_pages":null,"source_url":"https://www.aiuc-1.com/accountability/conduct-vendor-due-diligence"},"direct":false,"htmlUrl":"/agents/records/ctrl-aiuc-1-e006-362f564d.html","id":"ctrl:aiuc-1:E006","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aaiuc-1%3AE006","sourceIds":["aiuc-1"],"sourceUrl":"https://www.aiuc-1.com/accountability/conduct-vendor-due-diligence","title":"E006 — Conduct vendor due diligence","type":"control","url":"/assets/agent_record-ctrl-aiuc-1-e006-362f564d.11bc436f4b4c62cc.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/aiuc-1/","description":"Review internal processes","details":{"automation":"manual","control_category":"administrative","control_id":"E008","control_type":"preventive","domains":["AI Governance","Governance, Policy & Oversight"],"framework":"aiuc-1","group":"Accountability","key_control":false,"requirement_frequency":"Every 12 months","requirement_status":"mandatory","risk_count":3,"source_pages":null,"source_url":"https://www.aiuc-1.com/accountability/review-internal-processes"},"direct":false,"htmlUrl":"/agents/records/ctrl-aiuc-1-e008-c8f7f0e4.html","id":"ctrl:aiuc-1:E008","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aaiuc-1%3AE008","sourceIds":["aiuc-1"],"sourceUrl":"https://www.aiuc-1.com/accountability/review-internal-processes","title":"E008 — Review internal processes","type":"control","url":"/assets/agent_record-ctrl-aiuc-1-e008-c8f7f0e4.00ae89d2b282282f.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/aiuc-1/","description":"Establish AI acceptable use policy","details":{"automation":"manual","control_category":"administrative","control_id":"E010","control_type":"preventive","domains":["AI Governance","Governance, Policy & Oversight"],"framework":"aiuc-1","group":"Accountability","key_control":false,"requirement_frequency":"Every 12 months","requirement_status":"mandatory","risk_count":7,"source_pages":null,"source_url":"https://www.aiuc-1.com/accountability/establish-ai-acceptable-use-policy"},"direct":false,"htmlUrl":"/agents/records/ctrl-aiuc-1-e010-250d0c25.html","id":"ctrl:aiuc-1:E010","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aaiuc-1%3AE010","sourceIds":["aiuc-1"],"sourceUrl":"https://www.aiuc-1.com/accountability/establish-ai-acceptable-use-policy","title":"E010 — Establish AI acceptable use policy","type":"control","url":"/assets/agent_record-ctrl-aiuc-1-e010-250d0c25.c5b54be86de2c8f3.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/aiuc-1/","description":"Document regulatory compliance","details":{"automation":"manual","control_category":"administrative","control_id":"E012","control_type":"preventive","domains":["AI Governance","Governance, Policy & Oversight"],"framework":"aiuc-1","group":"Accountability","key_control":false,"requirement_frequency":"Every 6 months","requirement_status":"mandatory","risk_count":3,"source_pages":null,"source_url":"https://www.aiuc-1.com/accountability/document-regulatory-compliance"},"direct":false,"htmlUrl":"/agents/records/ctrl-aiuc-1-e012-78a3be53.html","id":"ctrl:aiuc-1:E012","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aaiuc-1%3AE012","sourceIds":["aiuc-1"],"sourceUrl":"https://www.aiuc-1.com/accountability/document-regulatory-compliance","title":"E012 — Document regulatory compliance","type":"control","url":"/assets/agent_record-ctrl-aiuc-1-e012-78a3be53.10961e879e61170f.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/aiuc-1/","description":"Implement quality management system","details":{"automation":"manual","control_category":"administrative","control_id":"E013","control_type":"preventive","domains":["AI Governance","Governance, Policy & Oversight"],"framework":"aiuc-1","group":"Accountability","key_control":false,"requirement_frequency":"Every 12 months","requirement_status":"optional","risk_count":3,"source_pages":null,"source_url":"https://www.aiuc-1.com/accountability/implement-quality-management-system"},"direct":false,"htmlUrl":"/agents/records/ctrl-aiuc-1-e013-7efd0f38.html","id":"ctrl:aiuc-1:E013","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aaiuc-1%3AE013","sourceIds":["aiuc-1"],"sourceUrl":"https://www.aiuc-1.com/accountability/implement-quality-management-system","title":"E013 — Implement quality management system","type":"control","url":"/assets/agent_record-ctrl-aiuc-1-e013-7efd0f38.389d202f1be575e4.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"detective"},"canonicalUrl":"https://controlsmap.com/frameworks/aiuc-1/","description":"Log AI system activity","details":{"automation":"automated","control_category":"technical","control_id":"E015","control_type":"detective","domains":["AI Governance","Governance, Policy & Oversight"],"framework":"aiuc-1","group":"Accountability","key_control":false,"requirement_frequency":"Every 12 months","requirement_status":"mandatory","risk_count":6,"source_pages":null,"source_url":"https://www.aiuc-1.com/accountability/log-model-activity"},"direct":false,"htmlUrl":"/agents/records/ctrl-aiuc-1-e015-94a0c8ea.html","id":"ctrl:aiuc-1:E015","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aaiuc-1%3AE015","sourceIds":["aiuc-1"],"sourceUrl":"https://www.aiuc-1.com/accountability/log-model-activity","title":"E015 — Log AI system activity","type":"control","url":"/assets/agent_record-ctrl-aiuc-1-e015-94a0c8ea.656c173a4dbefe3f.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/aiuc-1/","description":"Implement AI disclosure mechanisms","details":{"automation":"automated","control_category":"technical","control_id":"E016","control_type":"preventive","domains":["AI Governance","Governance, Policy & Oversight"],"framework":"aiuc-1","group":"Accountability","key_control":false,"requirement_frequency":"Every 12 months","requirement_status":"mandatory","risk_count":6,"source_pages":null,"source_url":"https://www.aiuc-1.com/accountability/implement-ai-disclosure-mechanisms"},"direct":false,"htmlUrl":"/agents/records/ctrl-aiuc-1-e016-8f16478c.html","id":"ctrl:aiuc-1:E016","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aaiuc-1%3AE016","sourceIds":["aiuc-1"],"sourceUrl":"https://www.aiuc-1.com/accountability/implement-ai-disclosure-mechanisms","title":"E016 — Implement AI disclosure mechanisms","type":"control","url":"/assets/agent_record-ctrl-aiuc-1-e016-8f16478c.20ff782c5cc3bf1d.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/aiuc-1/","description":"Document system transparency policy","details":{"automation":"manual","control_category":"administrative","control_id":"E017","control_type":"preventive","domains":["AI Governance","Governance, Policy & Oversight"],"framework":"aiuc-1","group":"Accountability","key_control":false,"requirement_frequency":"Every 12 months","requirement_status":"optional","risk_count":4,"source_pages":null,"source_url":"https://www.aiuc-1.com/accountability/document-system-transparency-policy"},"direct":false,"htmlUrl":"/agents/records/ctrl-aiuc-1-e017-016942cc.html","id":"ctrl:aiuc-1:E017","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Aaiuc-1%3AE017","sourceIds":["aiuc-1"],"sourceUrl":"https://www.aiuc-1.com/accountability/document-system-transparency-policy","title":"E017 — Document system transparency policy","type":"control","url":"/assets/agent_record-ctrl-aiuc-1-e017-016942cc.9a7a70a575ad8c5f.json"},{"attributes":{"category":"administrative","framework":"ccpa","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/ccpa/","description":"Service-provider and contractor contract requirements","details":{"automation":"manual","control_category":"administrative","control_id":"CCPA-1798.140","control_type":"preventive","domains":["Data Protection & Privacy","Compliance, Audit & Assurance","Governance, Policy & Oversight"],"framework":"ccpa","group":"CCPA/CPRA (California Consumer Privacy)","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-ccpa-ccpa-1798-140-775f9cfa.html","id":"ctrl:ccpa:CCPA-1798.140","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Accpa%3ACCPA-1798.140","sourceIds":["ccpa"],"sourceUrl":null,"title":"CCPA-1798.140 — Service-provider and contractor contract requirements","type":"control","url":"/assets/agent_record-ctrl-ccpa-ccpa-1798-140-775f9cfa.b5ef741dc3aa2c1d.json"},{"attributes":{"category":"administrative","framework":"ccpa","type":"detective"},"canonicalUrl":"https://controlsmap.com/frameworks/ccpa/","description":"CPPA regulations: cybersecurity audits and risk assessments","details":{"automation":"manual","control_category":"administrative","control_id":"CCPA-1798.185","control_type":"detective","domains":["Data Protection & Privacy","Compliance, Audit & Assurance","Governance, Policy & Oversight"],"framework":"ccpa","group":"CCPA/CPRA (California Consumer Privacy)","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-ccpa-ccpa-1798-185-1b524211.html","id":"ctrl:ccpa:CCPA-1798.185","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Accpa%3ACCPA-1798.185","sourceIds":["ccpa"],"sourceUrl":null,"title":"CCPA-1798.185 — CPPA regulations: cybersecurity audits and risk assessments","type":"control","url":"/assets/agent_record-ctrl-ccpa-ccpa-1798-185-1b524211.18ee652fbb983ef5.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/cobit-2019/","description":"Managed I&T Management Framework","details":{"automation":"manual","control_category":"administrative","control_id":"APO01","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Human Resources / Personnel Security","Third-Party / Supply-Chain Risk","Asset Management & Inventory"],"framework":"cobit-2019","group":"Align, Plan and Organize","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-cobit-2019-apo01-d6a49088.html","id":"ctrl:cobit-2019:APO01","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Acobit-2019%3AAPO01","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"APO01 — Managed I&T Management Framework","type":"control","url":"/assets/agent_record-ctrl-cobit-2019-apo01-d6a49088.17277180b62a01b0.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/cobit-2019/","description":"Managed Strategy","details":{"automation":"manual","control_category":"administrative","control_id":"APO02","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Human Resources / Personnel Security","Third-Party / Supply-Chain Risk","Asset Management & Inventory"],"framework":"cobit-2019","group":"Align, Plan and Organize","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-cobit-2019-apo02-52b0bcbe.html","id":"ctrl:cobit-2019:APO02","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Acobit-2019%3AAPO02","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"APO02 — Managed Strategy","type":"control","url":"/assets/agent_record-ctrl-cobit-2019-apo02-52b0bcbe.7923d686af8ed602.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/cobit-2019/","description":"Managed Enterprise Architecture","details":{"automation":"manual","control_category":"administrative","control_id":"APO03","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Human Resources / Personnel Security","Third-Party / Supply-Chain Risk","Asset Management & Inventory"],"framework":"cobit-2019","group":"Align, Plan and Organize","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":1,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-cobit-2019-apo03-5d678454.html","id":"ctrl:cobit-2019:APO03","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Acobit-2019%3AAPO03","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"APO03 — Managed Enterprise Architecture","type":"control","url":"/assets/agent_record-ctrl-cobit-2019-apo03-5d678454.4bc91b1a24a0f0fb.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/cobit-2019/","description":"Managed Innovation","details":{"automation":"manual","control_category":"administrative","control_id":"APO04","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Human Resources / Personnel Security","Third-Party / Supply-Chain Risk","Asset Management & Inventory"],"framework":"cobit-2019","group":"Align, Plan and Organize","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-cobit-2019-apo04-e419c159.html","id":"ctrl:cobit-2019:APO04","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Acobit-2019%3AAPO04","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"APO04 — Managed Innovation","type":"control","url":"/assets/agent_record-ctrl-cobit-2019-apo04-e419c159.1413172a85fa87d5.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/cobit-2019/","description":"Managed Portfolio","details":{"automation":"manual","control_category":"administrative","control_id":"APO05","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Human Resources / Personnel Security","Third-Party / Supply-Chain Risk","Asset Management & Inventory"],"framework":"cobit-2019","group":"Align, Plan and Organize","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-cobit-2019-apo05-ea9d3f42.html","id":"ctrl:cobit-2019:APO05","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Acobit-2019%3AAPO05","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"APO05 — Managed Portfolio","type":"control","url":"/assets/agent_record-ctrl-cobit-2019-apo05-ea9d3f42.75cea46e7750ba64.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/cobit-2019/","description":"Managed Budget and Costs","details":{"automation":"manual","control_category":"administrative","control_id":"APO06","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Human Resources / Personnel Security","Third-Party / Supply-Chain Risk","Asset Management & Inventory"],"framework":"cobit-2019","group":"Align, Plan and Organize","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-cobit-2019-apo06-2191e824.html","id":"ctrl:cobit-2019:APO06","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Acobit-2019%3AAPO06","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"APO06 — Managed Budget and Costs","type":"control","url":"/assets/agent_record-ctrl-cobit-2019-apo06-2191e824.2240d33dbfc81ca4.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/cobit-2019/","description":"Managed Human Resources","details":{"automation":"manual","control_category":"administrative","control_id":"APO07","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Human Resources / Personnel Security","Third-Party / Supply-Chain Risk","Asset Management & Inventory"],"framework":"cobit-2019","group":"Align, Plan and Organize","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-cobit-2019-apo07-20c9bdf0.html","id":"ctrl:cobit-2019:APO07","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Acobit-2019%3AAPO07","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"APO07 — Managed Human Resources","type":"control","url":"/assets/agent_record-ctrl-cobit-2019-apo07-20c9bdf0.8ce7c088d2a3c554.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/cobit-2019/","description":"Managed Relationships","details":{"automation":"manual","control_category":"administrative","control_id":"APO08","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Human Resources / Personnel Security","Third-Party / Supply-Chain Risk","Asset Management & Inventory"],"framework":"cobit-2019","group":"Align, Plan and Organize","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-cobit-2019-apo08-6c76314b.html","id":"ctrl:cobit-2019:APO08","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Acobit-2019%3AAPO08","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"APO08 — Managed Relationships","type":"control","url":"/assets/agent_record-ctrl-cobit-2019-apo08-6c76314b.c40090b090bae7c6.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/cobit-2019/","description":"Managed Service Agreements","details":{"automation":"manual","control_category":"administrative","control_id":"APO09","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Human Resources / Personnel Security","Third-Party / Supply-Chain Risk","Asset Management & Inventory"],"framework":"cobit-2019","group":"Align, Plan and Organize","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":8,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-cobit-2019-apo09-2d1f48e2.html","id":"ctrl:cobit-2019:APO09","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Acobit-2019%3AAPO09","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"APO09 — Managed Service Agreements","type":"control","url":"/assets/agent_record-ctrl-cobit-2019-apo09-2d1f48e2.633991f774128f82.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/cobit-2019/","description":"Managed Vendors","details":{"automation":"manual","control_category":"administrative","control_id":"APO10","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Human Resources / Personnel Security","Third-Party / Supply-Chain Risk","Asset Management & Inventory"],"framework":"cobit-2019","group":"Align, Plan and Organize","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":8,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-cobit-2019-apo10-2c3cb0dc.html","id":"ctrl:cobit-2019:APO10","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Acobit-2019%3AAPO10","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"APO10 — Managed Vendors","type":"control","url":"/assets/agent_record-ctrl-cobit-2019-apo10-2c3cb0dc.c8d0cf0279298206.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/cobit-2019/","description":"Managed Quality","details":{"automation":"manual","control_category":"administrative","control_id":"APO11","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Human Resources / Personnel Security","Third-Party / Supply-Chain Risk","Asset Management & Inventory"],"framework":"cobit-2019","group":"Align, Plan and Organize","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-cobit-2019-apo11-92538e06.html","id":"ctrl:cobit-2019:APO11","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Acobit-2019%3AAPO11","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"APO11 — Managed Quality","type":"control","url":"/assets/agent_record-ctrl-cobit-2019-apo11-92538e06.fb8ce4f8567bb0c3.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/cobit-2019/","description":"Managed Risk","details":{"automation":"manual","control_category":"administrative","control_id":"APO12","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Human Resources / Personnel Security","Third-Party / Supply-Chain Risk","Asset Management & Inventory"],"framework":"cobit-2019","group":"Align, Plan and Organize","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-cobit-2019-apo12-9086e034.html","id":"ctrl:cobit-2019:APO12","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Acobit-2019%3AAPO12","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"APO12 — Managed Risk","type":"control","url":"/assets/agent_record-ctrl-cobit-2019-apo12-9086e034.9af7387f1850abe3.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/cobit-2019/","description":"Managed Security","details":{"automation":"manual","control_category":"administrative","control_id":"APO13","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Human Resources / Personnel Security","Third-Party / Supply-Chain Risk","Asset Management & Inventory"],"framework":"cobit-2019","group":"Align, Plan and Organize","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-cobit-2019-apo13-b83b9404.html","id":"ctrl:cobit-2019:APO13","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Acobit-2019%3AAPO13","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"APO13 — Managed Security","type":"control","url":"/assets/agent_record-ctrl-cobit-2019-apo13-b83b9404.ebdf8420c42e7c7d.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/cobit-2019/","description":"Managed Data","details":{"automation":"manual","control_category":"administrative","control_id":"APO14","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Human Resources / Personnel Security","Third-Party / Supply-Chain Risk","Asset Management & Inventory"],"framework":"cobit-2019","group":"Align, Plan and Organize","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-cobit-2019-apo14-ab650d02.html","id":"ctrl:cobit-2019:APO14","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Acobit-2019%3AAPO14","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"APO14 — Managed Data","type":"control","url":"/assets/agent_record-ctrl-cobit-2019-apo14-ab650d02.5061680c52a84d2d.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/cobit-2019/","description":"Ensured Governance Framework Setting and Maintenance","details":{"automation":"manual","control_category":"administrative","control_id":"EDM01","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Compliance, Audit & Assurance"],"framework":"cobit-2019","group":"Evaluate, Direct and Monitor","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-cobit-2019-edm01-95fe0a96.html","id":"ctrl:cobit-2019:EDM01","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Acobit-2019%3AEDM01","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"EDM01 — Ensured Governance Framework Setting and Maintenance","type":"control","url":"/assets/agent_record-ctrl-cobit-2019-edm01-95fe0a96.1091b5e14cca5487.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/cobit-2019/","description":"Ensured Benefits Delivery","details":{"automation":"manual","control_category":"administrative","control_id":"EDM02","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Compliance, Audit & Assurance"],"framework":"cobit-2019","group":"Evaluate, Direct and Monitor","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-cobit-2019-edm02-4b1996ae.html","id":"ctrl:cobit-2019:EDM02","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Acobit-2019%3AEDM02","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"EDM02 — Ensured Benefits Delivery","type":"control","url":"/assets/agent_record-ctrl-cobit-2019-edm02-4b1996ae.a3e03783eae610b2.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://controlsmap.com/frameworks/cobit-2019/","description":"Ensured Risk Optimization","details":{"automation":"manual","control_category":"administrative","control_id":"EDM03","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Compliance, Audit & Assurance"],"framework":"cobit-2019","group":"Evaluate, Direct and Monitor","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":false,"htmlUrl":"/agents/records/ctrl-cobit-2019-edm03-5708b8c4.html","id":"ctrl:cobit-2019:EDM03","mapUrl":"https://controlsmap.com/?v=1&node=ctrl%3Acobit-2019%3AEDM03","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"EDM03 — Ensured Risk Optimization","type":"control","url":"/assets/agent_record-ctrl-cobit-2019-edm03-5708b8c4.7bf10d395f0cda63.json"}],"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:032867964d8caa1f9119972d8d8336c3580a8e4908cc929807dd69afff643b61","properties":{"control_id":"EDM03","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-17-5ee3266f.json","sourceId":"uc:UC-GOV-17","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-edm03-5708b8c4.json","targetId":"ctrl:cobit-2019:EDM03","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:041a6664754708ac5cc6e68b67a32b5e05ae66d528cd1f8ced27d851f1b1619f","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-apo05-ea9d3f42.json","sourceId":"ctrl:cobit-2019:APO05","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:044870bb9f8c8f4641da1e572d13f41f15f0c7f82e9eaadb79fe7885da37e658","properties":{"control_id":"E008","coverage":"partial","delta":"periodic internal review of the AI control set and operating processes for continued effectiveness, beyond review of the policy text","framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-01-156cdd4f.json","sourceId":"uc:UC-AI-01","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-e008-c8f7f0e4.json","targetId":"ctrl:aiuc-1:E008","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:05f47708636fcc22888663483542bc3e8693875eea819fc13c46fbd1ba60f18f","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-apo09-2d1f48e2.json","sourceId":"ctrl:cobit-2019:APO09","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:076722c10b06e43d9f84521802be10ef1863a351ae38466b1fca083ff7a9fda1","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-aiuc-1-c008-94bd64f2.json","sourceId":"ctrl:aiuc-1:C008","targetDetailPath":"/data/v1/records/std-aiuc-1-d2a8b650.json","targetId":"std:aiuc-1","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0ebd16b93f0d685b00f964722a15f25c4f070950cfd07acd99388c1ed6a4526e","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-aiuc-1-a002-1cad7f1d.json","sourceId":"ctrl:aiuc-1:A002","targetDetailPath":"/data/v1/records/std-aiuc-1-d2a8b650.json","targetId":"std:aiuc-1","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:15a88c013f269a3472c9e13dcac70293ef79deacab09c42d2a942ceb7e66cf78","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-aiuc-1-d003-9f8f52f3.json","sourceId":"ctrl:aiuc-1:D003","targetDetailPath":"/data/v1/records/std-aiuc-1-d2a8b650.json","targetId":"std:aiuc-1","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:176888462abb754dc37b3a4a12b0775af91b62a797ccf757969e2c9fc7078651","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-aiuc-1-e015-94a0c8ea.json","sourceId":"ctrl:aiuc-1:E015","targetDetailPath":"/data/v1/records/std-aiuc-1-d2a8b650.json","targetId":"std:aiuc-1","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:1a49d4c807a940c6b50891663e057143621fdcb4c30dac1e95db5edeb937ec62","properties":{"control_id":"E001","coverage":"partial","delta":"a pre-approved failure plan for AI security breaches with containment, rollback, and customer-notification steps","framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-11-7112e573.json","sourceId":"uc:UC-AI-11","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-e001-ec2a2db9.json","targetId":"ctrl:aiuc-1:E001","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:1cbe84b3d02248a688536c82e7822f036836bb524da8e6cbd17b9c0c80bf40af","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-aiuc-1-c001-6bc6c173.json","sourceId":"ctrl:aiuc-1:C001","targetDetailPath":"/data/v1/records/std-aiuc-1-d2a8b650.json","targetId":"std:aiuc-1","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:1dcca32b0452c99d5de37ee18700cd6e8f1549943183c695f852aee32b95c7e4","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-aiuc-1-e004-a07a7b59.json","sourceId":"ctrl:aiuc-1:E004","targetDetailPath":"/data/v1/records/std-aiuc-1-d2a8b650.json","targetId":"std:aiuc-1","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:266423c540b8cc25e7664b89f4572ecc87cefad6a3aeb5657d0d452a9f76edb2","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-aiuc-1-c009-d98e532e.json","sourceId":"ctrl:aiuc-1:C009","targetDetailPath":"/data/v1/records/std-aiuc-1-d2a8b650.json","targetId":"std:aiuc-1","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:293c31975b4156ae704bb43345019929fc29556808a2eea712077d842d30c3ed","properties":{"control_id":"A002","coverage":"full","delta":null,"framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-17-420198e3.json","sourceId":"uc:UC-AI-17","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-a002-1cad7f1d.json","targetId":"ctrl:aiuc-1:A002","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:2a624909b80cf0180b61f0903fa2a0e878b9b569af172a20692c6f818f61cf81","properties":{"control_id":"A007","coverage":"partial","delta":"output-level safeguards against copyright, trademark, and other third-party intellectual-property infringement by generated content","framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-12-ff5c3c6a.json","sourceId":"uc:UC-AI-12","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-a007-c9925452.json","targetId":"ctrl:aiuc-1:A007","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:2c09c6aa382cf10f688a037000963947c1f9b7d147e88c98e51e6092f8d40391","properties":{"control_id":"APO01","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-01-e1e2136d.json","sourceId":"uc:UC-GOV-01","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-apo01-d6a49088.json","targetId":"ctrl:cobit-2019:APO01","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:2d670b2f17155b51a6d7d5d6a3db6b48a4ce3945880ec7611dffa694628a2f8f","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-apo12-9086e034.json","sourceId":"ctrl:cobit-2019:APO12","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:2e1a500f18d0e2b83e81106ed2f4fbf92860977b1a8e6661d8bc8b375f5e1366","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-ccpa-ccpa-1798-140-775f9cfa.json","sourceId":"ctrl:ccpa:CCPA-1798.140","targetDetailPath":"/data/v1/records/std-ccpa-55f3fd20.json","targetId":"std:ccpa","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:2e5e7658faeb4996f398585d2b33496e9e211cb7a10dff6da58cab17b0dc27fa","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-aiuc-1-e010-250d0c25.json","sourceId":"ctrl:aiuc-1:E010","targetDetailPath":"/data/v1/records/std-aiuc-1-d2a8b650.json","targetId":"std:aiuc-1","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:34b195b7f7d5b0b72283e64b6687d8f3319af857205f58041ee596a0b56eba98","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-apo13-b83b9404.json","sourceId":"ctrl:cobit-2019:APO13","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:365ae16f1a091922dbe4378ba6036bae12ac52ffec685123bb60d72a9fbe1dd3","properties":{"control_id":"APO05","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-13-81b348eb.json","sourceId":"uc:UC-GOV-13","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-apo05-ea9d3f42.json","targetId":"ctrl:cobit-2019:APO05","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:36c6e5ac6d05e57620f65d498b9f7a8786293c1b6831590d42c8b49fdbd7d40e","properties":{"control_id":"EDM02","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-13-81b348eb.json","sourceId":"uc:UC-GOV-13","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-edm02-4b1996ae.json","targetId":"ctrl:cobit-2019:EDM02","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:39dff700e2a0bbdef624f431f6804954b71d44876cada877e7f382362a2cddea","properties":{"control_id":"APO14","coverage":"partial","delta":"operational data management - data-management strategy, business glossary/metadata, data-quality profiling and cleansing, archiving/backup - beyond governance policy and oversight bodies","framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-20-4a468c1a.json","sourceId":"uc:UC-GOV-20","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-apo14-ab650d02.json","targetId":"ctrl:cobit-2019:APO14","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3bd43539bb786f85240cea4b1fb5bd69ec14f48526c064176fdbb9189dd5b27d","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-edm03-5708b8c4.json","sourceId":"ctrl:cobit-2019:EDM03","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4a56783ad6dcc794d803ee7fe980c8690886e0375e32405c74497491ed4b0b70","properties":{"control_id":"APO07","coverage":"partial","delta":"workforce capacity/utilization planning and contract-staff management, beyond attracting, developing, and retaining competent personnel","framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-10-016614d1.json","sourceId":"uc:UC-GOV-10","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-apo07-20c9bdf0.json","targetId":"ctrl:cobit-2019:APO07","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4a8e22f593fe67551313edcaf4b955e046be41974b6272570b56b85ab824f27d","properties":{"control_id":"APO04","coverage":"partial","delta":"APO04 also requires technology-trend scanning and fostering an innovation-conducive environment","framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-13-81b348eb.json","sourceId":"uc:UC-GOV-13","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-apo04-e419c159.json","targetId":"ctrl:cobit-2019:APO04","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4afb84782e3cec6bd552916b34f8b15f3759125ed7ec2be222c7c91b5a6e3a61","properties":{"control_id":"APO06","coverage":"partial","delta":"full IT financial management including cost transparency and allocation models","framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-11-a13b60d3.json","sourceId":"uc:UC-GOV-11","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-apo06-2191e824.json","targetId":"ctrl:cobit-2019:APO06","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4c7effc1e728339a4e8a777ea4487a722140f1a715d83dbe1b941a4af5afdd1d","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-apo01-d6a49088.json","sourceId":"ctrl:cobit-2019:APO01","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:5565d9ecf7ae5f03599e83bd0cb9e5caf5c2d8d89ac1d256fe39783e5332d0b6","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-apo03-5d678454.json","sourceId":"ctrl:cobit-2019:APO03","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:621d04b1a2deeaf39ec2c83a5dfdbfa03e8cdcda00b1b7506875d8e238a2c65e","properties":{"control_id":"E003","coverage":"partial","delta":"a pre-approved failure plan for hallucination incidents with containment, rollback, and customer-notification steps","framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-11-7112e573.json","sourceId":"uc:UC-AI-11","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-e003-2e1c73ec.json","targetId":"ctrl:aiuc-1:E003","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:6af6976069665b10d4b3552ac957d6046868428cb13f6aad904d27fc4a1976ab","properties":{"control_id":"APO13","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-15-828b3eec.json","sourceId":"uc:UC-GOV-15","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-apo13-b83b9404.json","targetId":"ctrl:cobit-2019:APO13","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7484f9d3ad03a124617eeca495401713a19159bfd21a319c6d70154ec7379829","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-apo04-e419c159.json","sourceId":"ctrl:cobit-2019:APO04","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7677aeab7f884ba8b21cc4945d4354d344a58e19089c4d325a668392b0e90983","properties":{"control_id":"B006","coverage":"full","delta":null,"framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-19-535f3660.json","sourceId":"uc:UC-AI-19","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-b006-2951b397.json","targetId":"ctrl:aiuc-1:B006","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:7f09401880d79a7d47360a60cf925b304d7d26eb19a9b83c74431e9b98b0ebd6","properties":{"control_id":"APO11","coverage":"partial","delta":"embedding quality management practices across processes, projects, and deliverables","framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-22-c0b503b4.json","sourceId":"uc:UC-GOV-22","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-apo11-92538e06.json","targetId":"ctrl:cobit-2019:APO11","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:82c78b51e755401f6ce93aa7d9f4f97112d5a31cc8132b148c05aa94938077ac","properties":{"control_id":"E013","coverage":"full","delta":null,"framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-24-066ea393.json","sourceId":"uc:UC-AI-24","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-e013-7efd0f38.json","targetId":"ctrl:aiuc-1:E013","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:970b37f571d1289fab1672f15a9bbee65cc4f9e65d4b8ebc43b29dbcfe7256f8","properties":{"control_id":"EDM01","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-01-e1e2136d.json","sourceId":"uc:UC-GOV-01","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-edm01-95fe0a96.json","targetId":"ctrl:cobit-2019:EDM01","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:9b1a000fb0bc87b17f9c36c3bac7b6635fafd307d5e9101ecb04b57d5c2f6904","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-aiuc-1-b006-2951b397.json","sourceId":"ctrl:aiuc-1:B006","targetDetailPath":"/data/v1/records/std-aiuc-1-d2a8b650.json","targetId":"std:aiuc-1","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:9c55dec1dbd4672cf87ec71fa139b1a8fcc3c5b3f88aff3b23ca693e54a8ab67","properties":{"control_id":"E010","coverage":"partial","delta":"establish and implement an end-user AI acceptable use policy, with violation detection and user notifications beyond intended-use and legal-prohibition screening","framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-12-ff5c3c6a.json","sourceId":"uc:UC-AI-12","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-e010-250d0c25.json","targetId":"ctrl:aiuc-1:E010","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:9e823c9b9f8f190d5ccca5bbd11e0fa9f642ec650887926835ab9dd785a79abd","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-aiuc-1-e016-8f16478c.json","sourceId":"ctrl:aiuc-1:E016","targetDetailPath":"/data/v1/records/std-aiuc-1-d2a8b650.json","targetId":"std:aiuc-1","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a092db43ec68d7cc5bf48c7b8adcbc0c9aeff13ff38233c27c9ff01bc82eaab7","properties":{"control_id":"CCPA-1798.185","coverage":"partial","delta":"risk-assessment submission obligations handled under risk management controls","framework":"ccpa","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"CCPA (2018) as amended by CPRA (2020)"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-23-124d94d5.json","sourceId":"uc:UC-AUDIT-23","targetDetailPath":"/data/v1/records/ctrl-ccpa-ccpa-1798-185-1b524211.json","targetId":"ctrl:ccpa:CCPA-1798.185","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a40ea91da42c62c6eacc53e2655a44e95b18b26a6ecc50c2554ac27c8c221976","properties":{"control_id":"E017","coverage":"partial","delta":"external transparency artifacts (model cards, datasheets, AI bill of materials) and a shared-responsibility statement distributed under a documented sharing policy","framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-06-f47eedcb.json","sourceId":"uc:UC-AI-06","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-e017-016942cc.json","targetId":"ctrl:aiuc-1:E017","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a7a74ed899c6ff896286f35d35109816d9ec166a06a448af63e66dfd804745a7","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-apo11-92538e06.json","sourceId":"ctrl:cobit-2019:APO11","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:a9edce24ec99044ebcc918f2f32a590d00d0b76979d26a83751525cff6d42b33","properties":{"control_id":"APO12","coverage":"partial","delta":"operational risk identification, assessment, and response processes","framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-17-5ee3266f.json","sourceId":"uc:UC-GOV-17","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-apo12-9086e034.json","targetId":"ctrl:cobit-2019:APO12","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:adbaa4bf87a505a87b022653888d959ad0ec5b716ebd2383be39e0601fb3b967","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-aiuc-1-e002-aa262146.json","sourceId":"ctrl:aiuc-1:E002","targetDetailPath":"/data/v1/records/std-aiuc-1-d2a8b650.json","targetId":"std:aiuc-1","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b1d6e2c80f69b4b757f74c96382200ee89915eb0873d0c63ab06de4399f644d5","properties":{"control_id":"E004","coverage":"partial","delta":"define which AI system changes require formal review or approval, assign the accountable approver for each, and retain approval decisions with supporting evidence","framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-02-d2679f4e.json","sourceId":"uc:UC-AI-02","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-e004-a07a7b59.json","targetId":"ctrl:aiuc-1:E004","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b479abf709a6ebeb9b6cd913770c40b14e1946a8245638f774b7cfc789b4b683","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-aiuc-1-a001-a1b59a6f.json","sourceId":"ctrl:aiuc-1:A001","targetDetailPath":"/data/v1/records/std-aiuc-1-d2a8b650.json","targetId":"std:aiuc-1","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b48d208fc579b8bfaf3f263db5da6c421457ede838fd19c511096175349f2716","properties":{"control_id":"APO10","coverage":"partial","delta":"day-to-day vendor performance monitoring and contract administration","framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-tprm-01-16b62053.json","sourceId":"uc:UC-TPRM-01","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-apo10-2c3cb0dc.json","targetId":"ctrl:cobit-2019:APO10","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b4c6b61aad8707cab70cd5ca0fd1cca9088df571ff39794a1db20673515a2460","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-apo08-6c76314b.json","sourceId":"ctrl:cobit-2019:APO08","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:b9234cf242770d990321cf2b835603cab23434062235ee36dff7aa0ee556cc7f","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-aiuc-1-e003-2e1c73ec.json","sourceId":"ctrl:aiuc-1:E003","targetDetailPath":"/data/v1/records/std-aiuc-1-d2a8b650.json","targetId":"std:aiuc-1","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:bbb58faf8b3bbc3d66ef9d7bdeb1609b34fe95674799e8fafe7397a3eb61191b","properties":{"control_id":"D003","coverage":"full","delta":null,"framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-19-535f3660.json","sourceId":"uc:UC-AI-19","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-d003-9f8f52f3.json","targetId":"ctrl:aiuc-1:D003","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:bc558ad8ff092d5a9e10eae1b515809838d780083b7ba00c51f9a09147dac950","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-aiuc-1-e012-78a3be53.json","sourceId":"ctrl:aiuc-1:E012","targetDetailPath":"/data/v1/records/std-aiuc-1-d2a8b650.json","targetId":"std:aiuc-1","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:bd3d4679a51e4456a526dc8287d9adfe70592a44844d9d0b698e73121dd3757e","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-ccpa-ccpa-1798-185-1b524211.json","sourceId":"ctrl:ccpa:CCPA-1798.185","targetDetailPath":"/data/v1/records/std-ccpa-55f3fd20.json","targetId":"std:ccpa","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c004356ed83fe24ae6123dec85b7ce5b0a8df574641f5cf6abb86bf0567cdd12","properties":{"control_id":"E015","coverage":"full","delta":null,"framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-08-fada68b7.json","sourceId":"uc:UC-AI-08","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-e015-94a0c8ea.json","targetId":"ctrl:aiuc-1:E015","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c155012acf013e8a1e3c96c8c7765103fb5c190959a137a8a6cc41a1a4350970","properties":{"control_id":"CCPA-1798.140","coverage":"full","delta":null,"framework":"ccpa","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"CCPA (2018) as amended by CPRA (2020)"},"sourceDetailPath":"/data/v1/records/uc-uc-tprm-03-c9edcf93.json","sourceId":"uc:UC-TPRM-03","targetDetailPath":"/data/v1/records/ctrl-ccpa-ccpa-1798-140-775f9cfa.json","targetId":"ctrl:ccpa:CCPA-1798.140","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:c3af86201b362726dcf731b480743ed527971d2ee9164ddbdda693ec766a6961","properties":{"control_id":"E012","coverage":"partial","delta":"semiannual documentation of the AI system's regulatory compliance posture and obligations register shared with customers","framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-13-2ce71d80.json","sourceId":"uc:UC-AI-13","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-e012-78a3be53.json","targetId":"ctrl:aiuc-1:E012","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d23c16c0475ddff17cb84767adaa69eb11e7677c2c55a2aa5d8ac340b162dc89","properties":{"control_id":"C001","coverage":"partial","delta":"a system-specific AI risk taxonomy with severity tiers that drives output filtering, monitoring categories, and third-party test scope","framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-04-b35afd39.json","sourceId":"uc:UC-AI-04","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-c001-6bc6c173.json","targetId":"ctrl:aiuc-1:C001","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d30ef7fd2bbb90d2d22640fe778b901d09a3b65df04eb887c2b165df9dec0ab5","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-aiuc-1-e006-362f564d.json","sourceId":"ctrl:aiuc-1:E006","targetDetailPath":"/data/v1/records/std-aiuc-1-d2a8b650.json","targetId":"std:aiuc-1","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d48739629f27ebf74e1abf8e7ac546403e3835cefc31839403687da5212a0e56","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-apo10-2c3cb0dc.json","sourceId":"ctrl:cobit-2019:APO10","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:d7c540e0e30389753220c9e87a3a03115910e175f852bc36cfca2ad58ad503f3","properties":{"control_id":"C007","coverage":"partial","delta":"automated flagging of high-risk outputs with routing to a human reviewer before the output takes effect","framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-16-b95e2895.json","sourceId":"uc:UC-AI-16","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-c007-ebb82753.json","targetId":"ctrl:aiuc-1:C007","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:dadba8095e99ffd7e92198bac506ab1dd4ad19cf0bb742d44e096f3eba524948","properties":{"control_id":"E006","coverage":"partial","delta":"assess foundation and upstream model providers against explicit data-handling, PII-control, security, and compliance criteria, and retain the due-diligence evidence","framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-14-cc67739e.json","sourceId":"uc:UC-AI-14","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-e006-362f564d.json","targetId":"ctrl:aiuc-1:E006","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:dc36b697ee08e8cd25e67f4a055985ad077d734872f6d447b525f2a50133c1cb","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-aiuc-1-e001-ec2a2db9.json","sourceId":"ctrl:aiuc-1:E001","targetDetailPath":"/data/v1/records/std-aiuc-1-d2a8b650.json","targetId":"std:aiuc-1","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e270e94ce54063c9c8a81d2beab1319d0273c73b72377cee36700631917c486c","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-edm02-4b1996ae.json","sourceId":"ctrl:cobit-2019:EDM02","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e6c399ff0ee25c27146451e6ddd253be33a84b22c7801d7cd382e03242436fa9","properties":{"control_id":"C009","coverage":"partial","delta":"in-product user controls to pause, stop, or override the system and to submit feedback in real time","framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-16-b95e2895.json","sourceId":"uc:UC-AI-16","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-c009-d98e532e.json","targetId":"ctrl:aiuc-1:C009","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:eaa1921da3a2649c4cdd39f81d36c57c29574d8188b50a719df47c091df061ea","properties":{"control_id":"APO08","coverage":"partial","delta":"active business-IT relationship and demand management beyond communication","framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-21-8c5d79f9.json","sourceId":"uc:UC-GOV-21","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-apo08-6c76314b.json","targetId":"ctrl:cobit-2019:APO08","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:eb2763c24ae0bb6b3625b11233e6e45a9a11273627780a51ee50b96a9c66f2a8","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-apo14-ab650d02.json","sourceId":"ctrl:cobit-2019:APO14","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ebac0326a43a9932f34e5ec23ecdb7095630f603de87323ae9aa0f76f88861ac","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-aiuc-1-e008-c8f7f0e4.json","sourceId":"ctrl:aiuc-1:E008","targetDetailPath":"/data/v1/records/std-aiuc-1-d2a8b650.json","targetId":"std:aiuc-1","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ec12eedda1de13de98fa6891f9f791b3b3dae6903f4d6bd9259f131e9b9310df","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-edm01-95fe0a96.json","sourceId":"ctrl:cobit-2019:EDM01","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ed6055e345e89117b3a987498744584de023ad64a77ec1210e5a9cb035b10000","properties":{"control_id":"A001","coverage":"full","delta":null,"framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-17-420198e3.json","sourceId":"uc:UC-AI-17","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-a001-a1b59a6f.json","targetId":"ctrl:aiuc-1:A001","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ef3f77091676a78388c875f348d356433f3f19fbe373bdfcbfd2bf3d21e9db45","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-aiuc-1-e013-7efd0f38.json","sourceId":"ctrl:aiuc-1:E013","targetDetailPath":"/data/v1/records/std-aiuc-1-d2a8b650.json","targetId":"std:aiuc-1","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ef5185bbce3dbf923fdad99dd5a87039f799656b92a6080d431a438782afac6b","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-aiuc-1-c007-ebb82753.json","sourceId":"ctrl:aiuc-1:C007","targetDetailPath":"/data/v1/records/std-aiuc-1-d2a8b650.json","targetId":"std:aiuc-1","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f0150af56262db15849d35b4a2f4499b9160beb986a4920fc1b938b468b1a1fd","properties":{"control_id":"APO03","coverage":"partial","delta":"EA vision and multi-domain (business/data/application/technology) reference architecture plus enterprise-architecture services, beyond security/privacy architecture","framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-19-115302cb.json","sourceId":"uc:UC-GOV-19","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-apo03-5d678454.json","targetId":"ctrl:cobit-2019:APO03","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f16e284a257e8b96794e10fbe08c1efc2c5e2fe1149b35ef766faf310ffbd634","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-apo06-2191e824.json","sourceId":"ctrl:cobit-2019:APO06","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f26464c19c5287e54a6d2bf630191ccc3b3196567844c1979896c115397f8603","properties":{"control_id":"C008","coverage":"partial","delta":"monitoring keyed to the AI risk taxonomy categories with per-category alert thresholds and response actions","framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-08-fada68b7.json","sourceId":"uc:UC-AI-08","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-c008-94bd64f2.json","targetId":"ctrl:aiuc-1:C008","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f28fb81c662abb1546d2c57a369268caa3464e3e177354b5f7aa9d1b65f8836c","properties":{"control_id":"E002","coverage":"partial","delta":"a pre-approved failure plan for harmful outputs with containment, rollback, and customer-notification steps","framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-11-7112e573.json","sourceId":"uc:UC-AI-11","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-e002-aa262146.json","targetId":"ctrl:aiuc-1:E002","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f2e4069dd7a05f05bd0106465d7dbcd580dfdf7eb3d7a5324c1de163edd4a76c","properties":{"control_id":"APO02","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-12-5c560a78.json","sourceId":"uc:UC-GOV-12","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-apo02-52b0bcbe.json","targetId":"ctrl:cobit-2019:APO02","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f3af93bd09f148bca3812d692cfd5d7444b8022fddc026684a5a5e383fb497a5","properties":{"control_id":"E016","coverage":"full","delta":null,"framework":"aiuc-1","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"July 15, 2026 release (quarterly update cadence)"},"sourceDetailPath":"/data/v1/records/uc-uc-ai-10-f53dd533.json","sourceId":"uc:UC-AI-10","targetDetailPath":"/data/v1/records/ctrl-aiuc-1-e016-8f16478c.json","targetId":"ctrl:aiuc-1:E016","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f6213ce4eca6e0a05539835ccc809e3e380f5d6ee08b389bfc2a865522fd173a","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-aiuc-1-e017-016942cc.json","sourceId":"ctrl:aiuc-1:E017","targetDetailPath":"/data/v1/records/std-aiuc-1-d2a8b650.json","targetId":"std:aiuc-1","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:fa1e03375b19113343f4dead8c7384d2ce6473a62a0177095daa5a8303d69ee2","properties":{"control_id":"APO09","coverage":"partial","delta":"service catalog definition and SLA lifecycle management","framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-tprm-01-16b62053.json","sourceId":"uc:UC-TPRM-01","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-apo09-2d1f48e2.json","targetId":"ctrl:cobit-2019:APO09","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:fa8227938dfbeba7034e6245da9a95bd92d79d368238a0bdf6af4620da3ca1ea","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-aiuc-1-a007-c9925452.json","sourceId":"ctrl:aiuc-1:A007","targetDetailPath":"/data/v1/records/std-aiuc-1-d2a8b650.json","targetId":"std:aiuc-1","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:fd5cc5846bbd4085805c3d24cd1befae5131799d97c039cee1e51044e90de1c6","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-apo07-20c9bdf0.json","sourceId":"ctrl:cobit-2019:APO07","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:fda234c9ec65b45c451ed32df4769fd66598af9f126f784a647a1bf79b5cf27a","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-apo02-52b0bcbe.json","sourceId":"ctrl:cobit-2019:APO02","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"}],"schemaVersion":1,"scope":"topics","total":731}