{"catalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","kind":"index","name":"unified","next":"/controls/assets/agent_indexes-unified-2.800f8d659752e8f0.json","page":1,"pageSize":100,"records":[{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-access-01-1e70b922.html","id":"uc:UC-ACCESS-01","title":"UC-ACCESS-01 — Provision and deprovision accounts through a managed lifecycle","type":"unified","url":"/controls/assets/agent_record-uc-uc-access-01-1e70b922.aaae532757aefee7.json"},{"attributes":{"category":"administrative","domain":"Access Control & Identity Management","type":"detective"},"htmlUrl":"/controls/agents/records/uc-uc-access-02-0132e278.html","id":"uc:UC-ACCESS-02","title":"UC-ACCESS-02 — Review user access rights periodically","type":"unified","url":"/controls/assets/agent_record-uc-uc-access-02-0132e278.526b7b236b6ea642.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-access-03-43eeb212.html","id":"uc:UC-ACCESS-03","title":"UC-ACCESS-03 — Enforce least privilege, need-to-know, and segregation of duties","type":"unified","url":"/controls/assets/agent_record-uc-uc-access-03-43eeb212.8b7fbc3c2bbd88db.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-access-04-75180489.html","id":"uc:UC-ACCESS-04","title":"UC-ACCESS-04 — Restrict privileged rights, utilities, and unauthorized software","type":"unified","url":"/controls/assets/agent_record-uc-uc-access-04-75180489.161d30d19a8f5d9a.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-access-05-9b7f3e34.html","id":"uc:UC-ACCESS-05","title":"UC-ACCESS-05 — Enforce approved authorizations for information and functions","type":"unified","url":"/controls/assets/agent_record-uc-uc-access-05-9b7f3e34.e82279706a4f5cf6.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-access-06-623f356c.html","id":"uc:UC-ACCESS-06","title":"UC-ACCESS-06 — Manage unique identities and identifiers end to end","type":"unified","url":"/controls/assets/agent_record-uc-uc-access-06-623f356c.d9a382ba8d87e1a9.json"},{"attributes":{"category":"administrative","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-access-07-ed06e251.html","id":"uc:UC-ACCESS-07","title":"UC-ACCESS-07 — Proof identities before binding credentials","type":"unified","url":"/controls/assets/agent_record-uc-uc-access-07-ed06e251.52b9b2bf061f8e69.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-access-08-7c9dc13e.html","id":"uc:UC-ACCESS-08","title":"UC-ACCESS-08 — Manage and protect authenticators across their lifecycle","type":"unified","url":"/controls/assets/agent_record-uc-uc-access-08-7c9dc13e.6acb138723e75f1c.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-access-09-444baafe.html","id":"uc:UC-ACCESS-09","title":"UC-ACCESS-09 — Authenticate all users with multi-factor authentication","type":"unified","url":"/controls/assets/agent_record-uc-uc-access-09-444baafe.7d0656b588afb2a7.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-access-10-130762ce.html","id":"uc:UC-ACCESS-10","title":"UC-ACCESS-10 — Authenticate devices and services before granting connections","type":"unified","url":"/controls/assets/agent_record-uc-uc-access-10-130762ce.7f3852818f031039.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-access-11-d0c7a1b8.html","id":"uc:UC-ACCESS-11","title":"UC-ACCESS-11 — Defend logons against brute-force and anomalous attempts","type":"unified","url":"/controls/assets/agent_record-uc-uc-access-11-d0c7a1b8.3af5a47597441c6f.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-access-12-8ef9e477.html","id":"uc:UC-ACCESS-12","title":"UC-ACCESS-12 — Lock, limit, and terminate user sessions","type":"unified","url":"/controls/assets/agent_record-uc-uc-access-12-8ef9e477.800d3db9269b6279.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-access-13-2ccf2dfa.html","id":"uc:UC-ACCESS-13","title":"UC-ACCESS-13 — Notify users of system terms and previous logon activity","type":"unified","url":"/controls/assets/agent_record-uc-uc-access-13-2ccf2dfa.9bcd6787ff89b6ed.json"},{"attributes":{"category":"administrative","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-access-14-99fd72b5.html","id":"uc:UC-ACCESS-14","title":"UC-ACCESS-14 — Authorize public content and external information sharing","type":"unified","url":"/controls/assets/agent_record-uc-uc-access-14-99fd72b5.6dbd15e1076b044c.json"},{"attributes":{"category":"administrative","domain":"Governance, Policy & Oversight","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-access-15-84699cae.html","id":"uc:UC-ACCESS-15","title":"UC-ACCESS-15 — Design control activities over technology access","type":"unified","url":"/controls/assets/agent_record-uc-uc-access-15-84699cae.16a2a3815815ebc4.json"},{"attributes":{"category":"technical","domain":"Secure Configuration & Change Management","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-access-16-7a8d6d65.html","id":"uc:UC-ACCESS-16","title":"UC-ACCESS-16 — Authorize, test, and approve changes and development","type":"unified","url":"/controls/assets/agent_record-uc-uc-access-16-7a8d6d65.3b078e9e6ebbf1ca.json"},{"attributes":{"category":"technical","domain":"Business Continuity & Disaster Recovery","type":"corrective"},"htmlUrl":"/controls/agents/records/uc-uc-access-17-c9ecd00d.html","id":"uc:UC-ACCESS-17","title":"UC-ACCESS-17 — Execute, monitor, and recover production processing","type":"unified","url":"/controls/assets/agent_record-uc-uc-access-17-c9ecd00d.209d6a41ef362a57.json"},{"attributes":{"category":"technical","domain":"Logging, Monitoring & Detection","type":"detective"},"htmlUrl":"/controls/agents/records/uc-uc-access-18-8ffbd456.html","id":"uc:UC-ACCESS-18","title":"UC-ACCESS-18 — Log and monitor system activity, capacity, and incidents","type":"unified","url":"/controls/assets/agent_record-uc-uc-access-18-8ffbd456.8fcd5ee78db6ac50.json"},{"attributes":{"category":"physical","domain":"Physical & Environmental Security","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-access-19-08a17359.html","id":"uc:UC-ACCESS-19","title":"UC-ACCESS-19 — Restrict physical access and maintain environmental safeguards","type":"unified","url":"/controls/assets/agent_record-uc-uc-access-19-08a17359.e74ed80b1b2a2415.json"},{"attributes":{"category":"technical","domain":"Financial Reporting Controls (SOX)","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-access-20-92554410.html","id":"uc:UC-ACCESS-20","title":"UC-ACCESS-20 — Ensure complete, accurate, and authorized data processing","type":"unified","url":"/controls/assets/agent_record-uc-uc-access-20-92554410.b5436584bc9b3a4b.json"},{"attributes":{"category":"administrative","domain":"Third-Party / Supply-Chain Risk","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-access-21-14f45683.html","id":"uc:UC-ACCESS-21","title":"UC-ACCESS-21 — Manage subservice organizations supporting the system","type":"unified","url":"/controls/assets/agent_record-uc-uc-access-21-14f45683.439634a8ced60b0e.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-ai-01-156cdd4f.html","id":"uc:UC-AI-01","title":"UC-AI-01 — Maintain and periodically review the AI policy","type":"unified","url":"/controls/assets/agent_record-uc-uc-ai-01-156cdd4f.b1a9ecf882c26009.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-ai-02-d2679f4e.html","id":"uc:UC-AI-02","title":"UC-AI-02 — Define AI roles, responsibilities, and competencies","type":"unified","url":"/controls/assets/agent_record-uc-uc-ai-02-d2679f4e.261e2c1b81ab9176.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-ai-03-cba029bc.html","id":"uc:UC-AI-03","title":"UC-AI-03 — Document AI system resources and dependencies","type":"unified","url":"/controls/assets/agent_record-uc-uc-ai-03-cba029bc.1b4c2249de89f6d2.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-ai-04-b35afd39.html","id":"uc:UC-AI-04","title":"UC-AI-04 — Assess impacts and classify AI systems before deployment","type":"unified","url":"/controls/assets/agent_record-uc-uc-ai-04-b35afd39.81fdfa326b9856b4.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-ai-05-d0edecc1.html","id":"uc:UC-AI-05","title":"UC-AI-05 — Set responsible AI development objectives and requirements","type":"unified","url":"/controls/assets/agent_record-uc-uc-ai-05-d0edecc1.5c439ad65eed4aa2.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-ai-06-f47eedcb.html","id":"uc:UC-AI-06","title":"UC-AI-06 — Maintain AI system technical documentation","type":"unified","url":"/controls/assets/agent_record-uc-uc-ai-06-f47eedcb.ca88a4fd9ff55102.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-ai-07-9c5c9573.html","id":"uc:UC-AI-07","title":"UC-AI-07 — Verify, validate, and control AI deployment and changes","type":"unified","url":"/controls/assets/agent_record-uc-uc-ai-07-9c5c9573.f3b60e1dc51e947b.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"detective"},"htmlUrl":"/controls/agents/records/uc-uc-ai-08-fada68b7.html","id":"uc:UC-AI-08","title":"UC-AI-08 — Log and monitor AI system behavior in operation","type":"unified","url":"/controls/assets/agent_record-uc-uc-ai-08-fada68b7.17e76d4fcbbf2190.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-ai-09-d6934cb6.html","id":"uc:UC-AI-09","title":"UC-AI-09 — Govern AI data quality, provenance, and preparation","type":"unified","url":"/controls/assets/agent_record-uc-uc-ai-09-d6934cb6.4f33d599f82f189e.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-ai-10-f53dd533.html","id":"uc:UC-AI-10","title":"UC-AI-10 — Meet transparency obligations for AI systems","type":"unified","url":"/controls/assets/agent_record-uc-uc-ai-10-f53dd533.b04e3a67309bcb8b.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"detective"},"htmlUrl":"/controls/agents/records/uc-uc-ai-11-7112e573.html","id":"uc:UC-AI-11","title":"UC-AI-11 — Operate AI concern, incident, and external reporting channels","type":"unified","url":"/controls/assets/agent_record-uc-uc-ai-11-7112e573.67b5731afbcaa19d.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-ai-12-ff5c3c6a.html","id":"uc:UC-AI-12","title":"UC-AI-12 — Enforce responsible and lawful use of AI systems","type":"unified","url":"/controls/assets/agent_record-uc-uc-ai-12-ff5c3c6a.475cfb5fa99b1f12.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-ai-13-2ce71d80.html","id":"uc:UC-AI-13","title":"UC-AI-13 — Assign AI value-chain roles and discharge obligations","type":"unified","url":"/controls/assets/agent_record-uc-uc-ai-13-2ce71d80.e53c0dc94cee576f.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-ai-14-cc67739e.html","id":"uc:UC-AI-14","title":"UC-AI-14 — Manage responsible AI with suppliers and customers","type":"unified","url":"/controls/assets/agent_record-uc-uc-ai-14-cc67739e.8d1fd0bd5af4eff9.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-ai-15-eb9589c6.html","id":"uc:UC-AI-15","title":"UC-AI-15 — Fulfill general-purpose AI model provider obligations","type":"unified","url":"/controls/assets/agent_record-uc-uc-ai-15-eb9589c6.3e6fcf93abd36ccf.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-ai-16-b95e2895.html","id":"uc:UC-AI-16","title":"UC-AI-16 — Ensure human oversight of AI decisions","type":"unified","url":"/controls/assets/agent_record-uc-uc-ai-16-b95e2895.86c70d1500042fd4.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-ai-17-420198e3.html","id":"uc:UC-AI-17","title":"UC-AI-17 — Define customer data-use and output-rights policies for AI services","type":"unified","url":"/controls/assets/agent_record-uc-uc-ai-17-420198e3.d10f15a46593e44f.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-ai-18-f15ac93a.html","id":"uc:UC-AI-18","title":"UC-AI-18 — Defend AI interfaces against adversarial input, injection, and endpoint abuse","type":"unified","url":"/controls/assets/agent_record-uc-uc-ai-18-f15ac93a.39e5bc290e9220b0.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-ai-19-535f3660.html","id":"uc:UC-AI-19","title":"UC-AI-19 — Constrain agent actions and tool use to authorized scope","type":"unified","url":"/controls/assets/agent_record-uc-uc-ai-19-535f3660.91d2983d1cb58b8c.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-ai-20-c0e507ce.html","id":"uc:UC-AI-20","title":"UC-AI-20 — Prevent harmful, out-of-scope, hallucinated, and over-exposed AI outputs","type":"unified","url":"/controls/assets/agent_record-uc-uc-ai-20-c0e507ce.4f4973ffa13e0d73.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"detective"},"htmlUrl":"/controls/agents/records/uc-uc-ai-21-8afd47db.html","id":"uc:UC-AI-21","title":"UC-AI-21 — Commission independent third-party AI evaluations on a quarterly cadence","type":"unified","url":"/controls/assets/agent_record-uc-uc-ai-21-8afd47db.bed92f1ea701bb17.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-ai-22-129d1e22.html","id":"uc:UC-AI-22","title":"UC-AI-22 — Prevent leakage of credentials and secrets through AI systems","type":"unified","url":"/controls/assets/agent_record-uc-uc-ai-22-129d1e22.fc3101d5ebbdc94e.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-ai-23-ea85f10d.html","id":"uc:UC-AI-23","title":"UC-AI-23 — Prevent misuse of AI systems for cyber offense and catastrophic harm","type":"unified","url":"/controls/assets/agent_record-uc-uc-ai-23-ea85f10d.ef2f0446a9ce395f.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-ai-24-066ea393.html","id":"uc:UC-AI-24","title":"UC-AI-24 — Operate an AI quality management system","type":"unified","url":"/controls/assets/agent_record-uc-uc-ai-24-066ea393.3fa240ad9c1141fb.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-ai-25-21e48906.html","id":"uc:UC-AI-25","title":"UC-AI-25 — Guide code-generating systems toward secure patterns and safe dependencies","type":"unified","url":"/controls/assets/agent_record-uc-uc-ai-25-21e48906.3e88130ebeda44a6.json"},{"attributes":{"category":"administrative","domain":"Asset Management & Inventory","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-asset-01-04dbd5db.html","id":"uc:UC-ASSET-01","title":"UC-ASSET-01 — Maintain a complete inventory of systems, hardware, and software","type":"unified","url":"/controls/assets/agent_record-uc-uc-asset-01-04dbd5db.3545aa02eb3e8925.json"},{"attributes":{"category":"administrative","domain":"Asset Management & Inventory","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-asset-02-6c6ac61b.html","id":"uc:UC-ASSET-02","title":"UC-ASSET-02 — Inventory data and document processing activities and flows","type":"unified","url":"/controls/assets/agent_record-uc-uc-asset-02-6c6ac61b.8ae49f6d3f7f7369.json"},{"attributes":{"category":"administrative","domain":"Asset Management & Inventory","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-asset-03-3e6216cd.html","id":"uc:UC-ASSET-03","title":"UC-ASSET-03 — Classify, prioritize, and label information and assets","type":"unified","url":"/controls/assets/agent_record-uc-uc-asset-03-3e6216cd.e773913b24e55545.json"},{"attributes":{"category":"physical","domain":"Asset Management & Inventory","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-asset-04-347e095f.html","id":"uc:UC-ASSET-04","title":"UC-ASSET-04 — Control storage media through use, storage, and destruction","type":"unified","url":"/controls/assets/agent_record-uc-uc-asset-04-347e095f.f82b13cf0dcae725.json"},{"attributes":{"category":"administrative","domain":"Asset Management & Inventory","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-asset-05-11852f6d.html","id":"uc:UC-ASSET-05","title":"UC-ASSET-05 — Inventory supplier services and assess critical suppliers","type":"unified","url":"/controls/assets/agent_record-uc-uc-asset-05-11852f6d.93ffae5272e197cc.json"},{"attributes":{"category":"administrative","domain":"Asset Management & Inventory","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-asset-06-d13d9c7f.html","id":"uc:UC-ASSET-06","title":"UC-ASSET-06 — Govern acceptable use of endpoints, off-site, and external systems","type":"unified","url":"/controls/assets/agent_record-uc-uc-asset-06-d13d9c7f.076f38870132bd17.json"},{"attributes":{"category":"administrative","domain":"Asset Management & Inventory","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-asset-07-5039208b.html","id":"uc:UC-ASSET-07","title":"UC-ASSET-07 — Manage assets through their life cycle and recover them at exit","type":"unified","url":"/controls/assets/agent_record-uc-uc-asset-07-5039208b.bb9b0a70441aaaf8.json"},{"attributes":{"category":"administrative","domain":"Asset Management & Inventory","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-asset-08-7413af1c.html","id":"uc:UC-ASSET-08","title":"UC-ASSET-08 — Transfer information securely under defined rules and agreements","type":"unified","url":"/controls/assets/agent_record-uc-uc-asset-08-7413af1c.c716f4b79fd50757.json"},{"attributes":{"category":"administrative","domain":"Vulnerability & Patch Management","type":"detective"},"htmlUrl":"/controls/agents/records/uc-uc-asset-09-911f6a6c.html","id":"uc:UC-ASSET-09","title":"UC-ASSET-09 — Receive, analyze, and act on threat and vulnerability intelligence","type":"unified","url":"/controls/assets/agent_record-uc-uc-asset-09-911f6a6c.4b941ac88810ce45.json"},{"attributes":{"category":"administrative","domain":"Risk Assessment & Management","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-asset-10-bbda2a79.html","id":"uc:UC-ASSET-10","title":"UC-ASSET-10 — Assess and track changes and exceptions for risk impact","type":"unified","url":"/controls/assets/agent_record-uc-uc-asset-10-bbda2a79.dad5469db0c65d37.json"},{"attributes":{"category":"administrative","domain":"Incident Management & Response","type":"corrective"},"htmlUrl":"/controls/agents/records/uc-uc-asset-11-714d9672.html","id":"uc:UC-ASSET-11","title":"UC-ASSET-11 — Improve security plans and processes from operational lessons","type":"unified","url":"/controls/assets/agent_record-uc-uc-asset-11-714d9672.87673f5b5d09f408.json"},{"attributes":{"category":"technical","domain":"Business Continuity & Disaster Recovery","type":"detective"},"htmlUrl":"/controls/agents/records/uc-uc-asset-12-32fbbd73.html","id":"uc:UC-ASSET-12","title":"UC-ASSET-12 — Operate scheduled processing, backup, and availability monitoring","type":"unified","url":"/controls/assets/agent_record-uc-uc-asset-12-32fbbd73.c004c03cdd188a62.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-audit-01-10668058.html","id":"uc:UC-AUDIT-01","title":"UC-AUDIT-01 — Maintain an independent internal audit function","type":"unified","url":"/controls/assets/agent_record-uc-uc-audit-01-10668058.c6b3609cccdcbd89.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-audit-02-0279f203.html","id":"uc:UC-AUDIT-02","title":"UC-AUDIT-02 — Establish a board-approved internal audit mandate and charter","type":"unified","url":"/controls/assets/agent_record-uc-uc-audit-02-0279f203.6a092a9e95145e5f.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-audit-03-927ae903.html","id":"uc:UC-AUDIT-03","title":"UC-AUDIT-03 — Ensure board oversight and support of internal audit","type":"unified","url":"/controls/assets/agent_record-uc-uc-audit-03-927ae903.c43ee5cdae23a77d.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-audit-04-c880e18f.html","id":"uc:UC-AUDIT-04","title":"UC-AUDIT-04 — Uphold integrity and ethical conduct in internal auditing","type":"unified","url":"/controls/assets/agent_record-uc-uc-audit-04-c880e18f.2bfaa16e4cca3381.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-audit-05-3332a81f.html","id":"uc:UC-AUDIT-05","title":"UC-AUDIT-05 — Maintain auditor objectivity and disclose impairments","type":"unified","url":"/controls/assets/agent_record-uc-uc-audit-05-3332a81f.e26928c20774b247.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-audit-06-3a5916e0.html","id":"uc:UC-AUDIT-06","title":"UC-AUDIT-06 — Ensure auditor competency and continuing development","type":"unified","url":"/controls/assets/agent_record-uc-uc-audit-06-3a5916e0.8c97944d4275dd04.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-audit-07-50f8c2fa.html","id":"uc:UC-AUDIT-07","title":"UC-AUDIT-07 — Exercise due professional care and professional skepticism","type":"unified","url":"/controls/assets/agent_record-uc-uc-audit-07-50f8c2fa.a2a6dd2b472e1834.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-audit-08-b0e8d44c.html","id":"uc:UC-AUDIT-08","title":"UC-AUDIT-08 — Protect confidential information obtained in audit work","type":"unified","url":"/controls/assets/agent_record-uc-uc-audit-08-b0e8d44c.22f1deb78eaae2a7.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-audit-09-f23ecfe4.html","id":"uc:UC-AUDIT-09","title":"UC-AUDIT-09 — Develop a risk-based internal audit strategy and plan","type":"unified","url":"/controls/assets/agent_record-uc-uc-audit-09-f23ecfe4.561933319546efa4.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-audit-10-fc9abe7f.html","id":"uc:UC-AUDIT-10","title":"UC-AUDIT-10 — Manage internal audit financial, human, and technology resources","type":"unified","url":"/controls/assets/agent_record-uc-uc-audit-10-fc9abe7f.bd419a9bd7655677.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-audit-11-80294fe7.html","id":"uc:UC-AUDIT-11","title":"UC-AUDIT-11 — Establish audit methodologies and engagement work programs","type":"unified","url":"/controls/assets/agent_record-uc-uc-audit-11-80294fe7.c65d648ff34756cd.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-audit-12-657c1271.html","id":"uc:UC-AUDIT-12","title":"UC-AUDIT-12 — Plan engagements with risk-based objectives, scope, and criteria","type":"unified","url":"/controls/assets/agent_record-uc-uc-audit-12-657c1271.c05815f3cfcc5ffa.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/controls/agents/records/uc-uc-audit-13-3dae730e.html","id":"uc:UC-AUDIT-13","title":"UC-AUDIT-13 — Gather and analyze evidence to develop engagement findings","type":"unified","url":"/controls/assets/agent_record-uc-uc-audit-13-3dae730e.edb88e503032c082.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/controls/agents/records/uc-uc-audit-14-5c0dbe8f.html","id":"uc:UC-AUDIT-14","title":"UC-AUDIT-14 — Evaluate findings and develop recommendations and action plans","type":"unified","url":"/controls/assets/agent_record-uc-uc-audit-14-5c0dbe8f.3a9f4eb7592d42b6.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-audit-15-18fe3d07.html","id":"uc:UC-AUDIT-15","title":"UC-AUDIT-15 — Document and supervise engagement work","type":"unified","url":"/controls/assets/agent_record-uc-uc-audit-15-18fe3d07.4565207cfd42720f.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/controls/agents/records/uc-uc-audit-16-03aa1161.html","id":"uc:UC-AUDIT-16","title":"UC-AUDIT-16 — Communicate final engagement results to stakeholders","type":"unified","url":"/controls/assets/agent_record-uc-uc-audit-16-03aa1161.7b8bce0fc43e554c.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/controls/agents/records/uc-uc-audit-17-94dc7e0c.html","id":"uc:UC-AUDIT-17","title":"UC-AUDIT-17 — Follow up on findings and escalate risk acceptance","type":"unified","url":"/controls/assets/agent_record-uc-uc-audit-17-94dc7e0c.534eee4ad59a366b.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-audit-18-7ab55995.html","id":"uc:UC-AUDIT-18","title":"UC-AUDIT-18 — Communicate with stakeholders on assurance matters","type":"unified","url":"/controls/assets/agent_record-uc-uc-audit-18-7ab55995.ae60acd9bed55d0b.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/controls/agents/records/uc-uc-audit-19-a0f61a19.html","id":"uc:UC-AUDIT-19","title":"UC-AUDIT-19 — Operate an audit quality assurance and improvement program","type":"unified","url":"/controls/assets/agent_record-uc-uc-audit-19-a0f61a19.c4c35b613649d11a.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/controls/agents/records/uc-uc-audit-20-6032484b.html","id":"uc:UC-AUDIT-20","title":"UC-AUDIT-20 — Obtain external quality assessments of internal audit","type":"unified","url":"/controls/assets/agent_record-uc-uc-audit-20-6032484b.7d3f2ee06a5edb0c.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/controls/agents/records/uc-uc-audit-21-6406caa4.html","id":"uc:UC-AUDIT-21","title":"UC-AUDIT-21 — Assess control effectiveness through testing and monitoring","type":"unified","url":"/controls/assets/agent_record-uc-uc-audit-21-6406caa4.20a499c5bd6a8fba.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/controls/agents/records/uc-uc-audit-22-2a70149b.html","id":"uc:UC-AUDIT-22","title":"UC-AUDIT-22 — Review risk strategy and performance with leadership","type":"unified","url":"/controls/assets/agent_record-uc-uc-audit-22-2a70149b.2533d8d7d9f2da4f.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/controls/agents/records/uc-uc-audit-23-124d94d5.html","id":"uc:UC-AUDIT-23","title":"UC-AUDIT-23 — Coordinate independent assurance reviews across providers","type":"unified","url":"/controls/assets/agent_record-uc-uc-audit-23-124d94d5.e6432f88d6853611.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/controls/agents/records/uc-uc-audit-24-fa96fe18.html","id":"uc:UC-AUDIT-24","title":"UC-AUDIT-24 — Manage compliance with external legal and regulatory requirements","type":"unified","url":"/controls/assets/agent_record-uc-uc-audit-24-fa96fe18.6ce38139f97bc1c2.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-audit-25-e23c8618.html","id":"uc:UC-AUDIT-25","title":"UC-AUDIT-25 — Maintain quality records and information for internal control","type":"unified","url":"/controls/assets/agent_record-uc-uc-audit-25-e23c8618.ed1ac7d0076ede73.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-audit-26-3a91d068.html","id":"uc:UC-AUDIT-26","title":"UC-AUDIT-26 — Authorize systems and internal connections before operation","type":"unified","url":"/controls/assets/agent_record-uc-uc-audit-26-3a91d068.bc0dc5f99b2f9366.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-audit-27-b7e48974.html","id":"uc:UC-AUDIT-27","title":"UC-AUDIT-27 — Govern expanded internal audit ERM responsibilities","type":"unified","url":"/controls/assets/agent_record-uc-uc-audit-27-b7e48974.8c10ebc77396c149.json"},{"attributes":{"category":"administrative","domain":"Business Continuity & Disaster Recovery","type":"corrective"},"htmlUrl":"/controls/agents/records/uc-uc-bcdr-01-428f23d3.html","id":"uc:UC-BCDR-01","title":"UC-BCDR-01 — Maintain business continuity and disaster recovery plans","type":"unified","url":"/controls/assets/agent_record-uc-uc-bcdr-01-428f23d3.a14205e34728a5b2.json"},{"attributes":{"category":"administrative","domain":"Business Continuity & Disaster Recovery","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-bcdr-02-2a51c24c.html","id":"uc:UC-BCDR-02","title":"UC-BCDR-02 — Establish and govern an ICT operational resilience framework","type":"unified","url":"/controls/assets/agent_record-uc-uc-bcdr-02-2a51c24c.f694bc93aa29d2e8.json"},{"attributes":{"category":"technical","domain":"Business Continuity & Disaster Recovery","type":"corrective"},"htmlUrl":"/controls/agents/records/uc-uc-bcdr-03-d30f4ccf.html","id":"uc:UC-BCDR-03","title":"UC-BCDR-03 — Back up data and verify restorability","type":"unified","url":"/controls/assets/agent_record-uc-uc-bcdr-03-d30f4ccf.a619c6aba0388413.json"},{"attributes":{"category":"technical","domain":"Business Continuity & Disaster Recovery","type":"corrective"},"htmlUrl":"/controls/agents/records/uc-uc-bcdr-04-5d004f42.html","id":"uc:UC-BCDR-04","title":"UC-BCDR-04 — Provide redundant and alternate processing, storage, and telecom","type":"unified","url":"/controls/assets/agent_record-uc-uc-bcdr-04-5d004f42.416bbe5e24a5fc8c.json"},{"attributes":{"category":"technical","domain":"Business Continuity & Disaster Recovery","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-bcdr-05-f73361f2.html","id":"uc:UC-BCDR-05","title":"UC-BCDR-05 — Manage capacity to meet availability requirements","type":"unified","url":"/controls/assets/agent_record-uc-uc-bcdr-05-f73361f2.b02d290009d0f202.json"},{"attributes":{"category":"administrative","domain":"Business Continuity & Disaster Recovery","type":"corrective"},"htmlUrl":"/controls/agents/records/uc-uc-bcdr-06-c505e5bd.html","id":"uc:UC-BCDR-06","title":"UC-BCDR-06 — Resolve operational incidents and eliminate root causes","type":"unified","url":"/controls/assets/agent_record-uc-uc-bcdr-06-c505e5bd.d2ea1e2bc9453461.json"},{"attributes":{"category":"technical","domain":"Business Continuity & Disaster Recovery","type":"corrective"},"htmlUrl":"/controls/agents/records/uc-uc-bcdr-07-e5d74596.html","id":"uc:UC-BCDR-07","title":"UC-BCDR-07 — Execute recovery plans to restore systems and operations","type":"unified","url":"/controls/assets/agent_record-uc-uc-bcdr-07-e5d74596.31119f470b0695f0.json"},{"attributes":{"category":"administrative","domain":"Business Continuity & Disaster Recovery","type":"corrective"},"htmlUrl":"/controls/agents/records/uc-uc-bcdr-08-6e625399.html","id":"uc:UC-BCDR-08","title":"UC-BCDR-08 — Declare recovery complete and set post-incident norms","type":"unified","url":"/controls/assets/agent_record-uc-uc-bcdr-08-6e625399.98101e1c05826204.json"},{"attributes":{"category":"administrative","domain":"Business Continuity & Disaster Recovery","type":"corrective"},"htmlUrl":"/controls/agents/records/uc-uc-bcdr-09-c9025680.html","id":"uc:UC-BCDR-09","title":"UC-BCDR-09 — Communicate recovery status to stakeholders","type":"unified","url":"/controls/assets/agent_record-uc-uc-bcdr-09-c9025680.effb57cb53340099.json"},{"attributes":{"category":"administrative","domain":"Business Continuity & Disaster Recovery","type":"detective"},"htmlUrl":"/controls/agents/records/uc-uc-bcdr-10-602160e4.html","id":"uc:UC-BCDR-10","title":"UC-BCDR-10 — Test recovery capabilities and train contingency personnel","type":"unified","url":"/controls/assets/agent_record-uc-uc-bcdr-10-602160e4.fa24dd217726e453.json"},{"attributes":{"category":"technical","domain":"Business Continuity & Disaster Recovery","type":"corrective"},"htmlUrl":"/controls/agents/records/uc-uc-bcdr-11-c3dddae2.html","id":"uc:UC-BCDR-11","title":"UC-BCDR-11 — Sustain operations via safe modes and alternate mechanisms","type":"unified","url":"/controls/assets/agent_record-uc-uc-bcdr-11-c3dddae2.a82c051a2088fd14.json"},{"attributes":{"category":"administrative","domain":"Business Continuity & Disaster Recovery","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-bcdr-12-0d9cc358.html","id":"uc:UC-BCDR-12","title":"UC-BCDR-12 — Operate IT services according to defined procedures","type":"unified","url":"/controls/assets/agent_record-uc-uc-bcdr-12-0d9cc358.cfd226e43bb257ce.json"},{"attributes":{"category":"technical","domain":"Logging, Monitoring & Detection","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-bcdr-13-aa7feb8e.html","id":"uc:UC-BCDR-13","title":"UC-BCDR-13 — Operate continuous security protection services","type":"unified","url":"/controls/assets/agent_record-uc-uc-bcdr-13-aa7feb8e.5d1308cbad7b5ebe.json"},{"attributes":{"category":"administrative","domain":"Financial Reporting Controls (SOX)","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-bcdr-14-997de451.html","id":"uc:UC-BCDR-14","title":"UC-BCDR-14 — Embed control activities in business processes","type":"unified","url":"/controls/assets/agent_record-uc-uc-bcdr-14-997de451.e55fdae644e9e601.json"},{"attributes":{"category":"administrative","domain":"Vulnerability & Patch Management","type":"preventive"},"htmlUrl":"/controls/agents/records/uc-uc-bcdr-16-462251f1.html","id":"uc:UC-BCDR-16","title":"UC-BCDR-16 — Participate in cyber threat intelligence sharing","type":"unified","url":"/controls/assets/agent_record-uc-uc-bcdr-16-462251f1.99d78e5cb1b2a539.json"}],"schemaVersion":1,"total":289}