{"catalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","kind":"index","name":"workflow","next":"/controls/assets/agent_indexes-workflow-2.1e8acb15233d0ef9.json","page":1,"pageSize":100,"records":[{"attributes":{"department":"internal-audit","domain":"audit","lineOfDefense":"assure"},"htmlUrl":"/controls/agents/records/wf-a1-f09c8201.html","id":"wf:A1","title":"Cybersecurity Assurance Review","type":"workflow","url":"/controls/assets/agent_record-wf-a1-f09c8201.fff64288c44c813a.json"},{"attributes":{"department":"internal-audit","domain":"audit","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-a10-c454863e.html","id":"wf:A10","title":"Internal Audit Ethics, Objectivity & Competency Program","type":"workflow","url":"/controls/assets/agent_record-wf-a10-c454863e.e34a55a51802dcbe.json"},{"attributes":{"department":"internal-audit","domain":"audit","lineOfDefense":"assure"},"htmlUrl":"/controls/agents/records/wf-a11-0924c009.html","id":"wf:A11","title":"Fraud & Forensic Investigation Engagement","type":"workflow","url":"/controls/assets/agent_record-wf-a11-0924c009.b43bacbdda8719b7.json"},{"attributes":{"department":"internal-audit","domain":"audit","lineOfDefense":"assure"},"htmlUrl":"/controls/agents/records/wf-a12-a338c67f.html","id":"wf:A12","title":"Audit Fieldwork, Findings & Reporting","type":"workflow","url":"/controls/assets/agent_record-wf-a12-a338c67f.5715723474eabdd9.json"},{"attributes":{"department":"internal-audit","domain":"audit","lineOfDefense":"assure"},"htmlUrl":"/controls/agents/records/wf-a13-86aa5cbb.html","id":"wf:A13","title":"ISO 27001 Certification Readiness","type":"workflow","url":"/controls/assets/agent_record-wf-a13-86aa5cbb.b61729c9c1409201.json"},{"attributes":{"department":"internal-audit","domain":"audit","lineOfDefense":"assure"},"htmlUrl":"/controls/agents/records/wf-a14-6d117a6b.html","id":"wf:A14","title":"Process Narrative & Walkthrough","type":"workflow","url":"/controls/assets/agent_record-wf-a14-6d117a6b.7f1300f621408740.json"},{"attributes":{"department":"internal-audit","domain":"audit","lineOfDefense":"assure"},"htmlUrl":"/controls/agents/records/wf-a15-e859f6b8.html","id":"wf:A15","title":"SOC 2 Trust Services Readiness","type":"workflow","url":"/controls/assets/agent_record-wf-a15-e859f6b8.5ebec63146d2e064.json"},{"attributes":{"department":"internal-audit","domain":"audit","lineOfDefense":"assure"},"htmlUrl":"/controls/agents/records/wf-a16-ed419388.html","id":"wf:A16","title":"Continuous Monitoring & Agent Evaluation","type":"workflow","url":"/controls/assets/agent_record-wf-a16-ed419388.d46e3f57c1d15f01.json"},{"attributes":{"department":"internal-audit","domain":"audit","lineOfDefense":"assure"},"htmlUrl":"/controls/agents/records/wf-a17-a4afb609.html","id":"wf:A17","title":"Fraud Risk Assessment & JE Testing","type":"workflow","url":"/controls/assets/agent_record-wf-a17-a4afb609.86b1a4a95e0998c3.json"},{"attributes":{"department":"internal-audit","domain":"audit","lineOfDefense":"assure"},"htmlUrl":"/controls/agents/records/wf-a18-be3cee23.html","id":"wf:A18","title":"ITGC Change & Provisioning Testing","type":"workflow","url":"/controls/assets/agent_record-wf-a18-be3cee23.9efd88663584e7a0.json"},{"attributes":{"department":"internal-audit","domain":"audit","lineOfDefense":"assure"},"htmlUrl":"/controls/agents/records/wf-a19-c8784b53.html","id":"wf:A19","title":"Substantive Testing & Data Analytics","type":"workflow","url":"/controls/assets/agent_record-wf-a19-c8784b53.720993526c12acca.json"},{"attributes":{"department":"internal-audit","domain":"audit","lineOfDefense":"assure"},"htmlUrl":"/controls/agents/records/wf-a2-163f5a6d.html","id":"wf:A2","title":"Internal Audit Engagement Lifecycle","type":"workflow","url":"/controls/assets/agent_record-wf-a2-163f5a6d.1f2fa520caf18974.json"},{"attributes":{"department":"internal-audit","domain":"audit","lineOfDefense":"assure"},"htmlUrl":"/controls/agents/records/wf-a3-05f42868.html","id":"wf:A3","title":"Audit Engagement Planning","type":"workflow","url":"/controls/assets/agent_record-wf-a3-05f42868.029fb4ab271aaf27.json"},{"attributes":{"department":"internal-audit","domain":"audit","lineOfDefense":"assure"},"htmlUrl":"/controls/agents/records/wf-a4-1cfdd4d5.html","id":"wf:A4","title":"Finding Remediation & Action-Plan Monitoring","type":"workflow","url":"/controls/assets/agent_record-wf-a4-1cfdd4d5.8a3eea6b96868f85.json"},{"attributes":{"department":"internal-audit","domain":"audit","lineOfDefense":"assure"},"htmlUrl":"/controls/agents/records/wf-a5-cb7fa618.html","id":"wf:A5","title":"Quality Assurance & Improvement Program Cycle","type":"workflow","url":"/controls/assets/agent_record-wf-a5-cb7fa618.22d45872d1b5b4d1.json"},{"attributes":{"department":"internal-audit","domain":"audit","lineOfDefense":"assure"},"htmlUrl":"/controls/agents/records/wf-a6-92070208.html","id":"wf:A6","title":"Audit Report Drafting","type":"workflow","url":"/controls/assets/agent_record-wf-a6-92070208.abdf7013a874bfd9.json"},{"attributes":{"department":"internal-audit","domain":"audit","lineOfDefense":"assure"},"htmlUrl":"/controls/agents/records/wf-a7-454c1d0e.html","id":"wf:A7","title":"Third-Party Vendor Assurance Engagement","type":"workflow","url":"/controls/assets/agent_record-wf-a7-454c1d0e.8eb7c945a884332b.json"},{"attributes":{"department":"internal-audit","domain":"audit","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-a8-414556d8.html","id":"wf:A8","title":"Internal Audit Charter, Independence & Board Governance Cycle","type":"workflow","url":"/controls/assets/agent_record-wf-a8-414556d8.4dfc1cf7879d44f5.json"},{"attributes":{"department":"internal-audit","domain":"audit","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-a9-8040386c.html","id":"wf:A9","title":"Annual Internal Audit Planning & Resource Management","type":"workflow","url":"/controls/assets/agent_record-wf-a9-8040386c.26498f6a11e3f41f.json"},{"attributes":{"department":"finance","domain":"business","lineOfDefense":null},"htmlUrl":"/controls/agents/records/wf-b1-d2a60d9c.html","id":"wf:B1","title":"Monthly Financial Close","type":"workflow","url":"/controls/assets/agent_record-wf-b1-d2a60d9c.f19943a97badbdd6.json"},{"attributes":{"department":"hr","domain":"business","lineOfDefense":null},"htmlUrl":"/controls/agents/records/wf-b2-fdee3cc6.html","id":"wf:B2","title":"Recruiting and Hiring Decision","type":"workflow","url":"/controls/assets/agent_record-wf-b2-fdee3cc6.fc87fbe7335b6206.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"monitor"},"htmlUrl":"/controls/agents/records/wf-c1-f9e3db77.html","id":"wf:C1","title":"Continuous Controls Monitoring (ISCM) Cycle","type":"workflow","url":"/controls/assets/agent_record-wf-c1-f9e3db77.f1646fabafe8cffe.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"assure"},"htmlUrl":"/controls/agents/records/wf-c10-29ff1ddb.html","id":"wf:C10","title":"Technical Security Testing & Pentest Engagement","type":"workflow","url":"/controls/assets/agent_record-wf-c10-29ff1ddb.9f1f8480004c4243.json"},{"attributes":{"department":"procurement","domain":"controls","lineOfDefense":"monitor"},"htmlUrl":"/controls/agents/records/wf-c11-f590792c.html","id":"wf:C11","title":"Vendor SOC 1/SOC 2 Report Review & CUEC Mapping","type":"workflow","url":"/controls/assets/agent_record-wf-c11-f590792c.260f9fa66ed03517.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c12-d75a948f.html","id":"wf:C12","title":"User Access Review & Recertification","type":"workflow","url":"/controls/assets/agent_record-wf-c12-d75a948f.302f671ab2e52abe.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c13-1ffe161d.html","id":"wf:C13","title":"Vulnerability & Patch Management Cycle","type":"workflow","url":"/controls/assets/agent_record-wf-c13-1ffe161d.fcc236694a19e429.json"},{"attributes":{"department":"operations","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c14-c6170cdd.html","id":"wf:C14","title":"Business Continuity & DR Test Exercise","type":"workflow","url":"/controls/assets/agent_record-wf-c14-c6170cdd.88c4f01fbfab4e5e.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c15-3675020d.html","id":"wf:C15","title":"Security Awareness Training Campaign","type":"workflow","url":"/controls/assets/agent_record-wf-c15-3675020d.d14d5f23e5227033.json"},{"attributes":{"department":"internal-audit","domain":"controls","lineOfDefense":"assure"},"htmlUrl":"/controls/agents/records/wf-c16-5cfe940e.html","id":"wf:C16","title":"ISMS Internal Audit & Management Review","type":"workflow","url":"/controls/assets/agent_record-wf-c16-5cfe940e.ba181a970b430052.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"monitor"},"htmlUrl":"/controls/agents/records/wf-c17-334c380f.html","id":"wf:C17","title":"SOC 2 Readiness & Evidence Collection","type":"workflow","url":"/controls/assets/agent_record-wf-c17-334c380f.1030a0b84885d33a.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c18-ca9e8eba.html","id":"wf:C18","title":"Cryptographic Key Management Review","type":"workflow","url":"/controls/assets/agent_record-wf-c18-ca9e8eba.c23e952ae7fec172.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c19-ef930979.html","id":"wf:C19","title":"Joiner-Mover-Leaver Access Lifecycle","type":"workflow","url":"/controls/assets/agent_record-wf-c19-ef930979.f98321c37d821981.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"monitor"},"htmlUrl":"/controls/agents/records/wf-c2-a1078981.html","id":"wf:C2","title":"CSF 2.0 Profile & Maturity Assessment","type":"workflow","url":"/controls/assets/agent_record-wf-c2-a1078981.e5d95cf62eb6dd90.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c20-5b99e185.html","id":"wf:C20","title":"Threat Intelligence & Insider Threat Program","type":"workflow","url":"/controls/assets/agent_record-wf-c20-5b99e185.65e42b194a2a9edc.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c21-3ea9108a.html","id":"wf:C21","title":"Data Retention & Secure Disposal","type":"workflow","url":"/controls/assets/agent_record-wf-c21-3ea9108a.8a4e0692a09e874e.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c23-d6d82467.html","id":"wf:C23","title":"Incident Reporting Channels & Spillage Response","type":"workflow","url":"/controls/assets/agent_record-wf-c23-d6d82467.933272f7e9bce55c.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c24-000b9f1d.html","id":"wf:C24","title":"System Categorization, Security Planning & Authorization","type":"workflow","url":"/controls/assets/agent_record-wf-c24-000b9f1d.855444bc738f8564.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c25-a2c9f603.html","id":"wf:C25","title":"Information Security Program Governance Review","type":"workflow","url":"/controls/assets/agent_record-wf-c25-a2c9f603.5f044cc5e17b06fc.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c26-0d7976b8.html","id":"wf:C26","title":"Security Policy Suite Review","type":"workflow","url":"/controls/assets/agent_record-wf-c26-0d7976b8.bb684b44a0282476.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c28-1635c493.html","id":"wf:C28","title":"Security & Privacy Architecture Review Board","type":"workflow","url":"/controls/assets/agent_record-wf-c28-1635c493.fe97dabbe45ae054.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c29-73942cbd.html","id":"wf:C29","title":"Privileged Access & Authorization Model Management","type":"workflow","url":"/controls/assets/agent_record-wf-c29-73942cbd.a612387ab62ff170.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c3-4a88b225.html","id":"wf:C3","title":"Cybersecurity Incident Response","type":"workflow","url":"/controls/assets/agent_record-wf-c3-4a88b225.00cc1a6a66136061.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c30-ece66f45.html","id":"wf:C30","title":"Identity & Authenticator Lifecycle Administration","type":"workflow","url":"/controls/assets/agent_record-wf-c30-ece66f45.44fec5da0389940d.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c31-c58b2f38.html","id":"wf:C31","title":"Authentication Platform & Session Policy Operations","type":"workflow","url":"/controls/assets/agent_record-wf-c31-c58b2f38.be1c0fa6f2c03371.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c32-53bd0bae.html","id":"wf:C32","title":"Public Content & External Sharing Authorization","type":"workflow","url":"/controls/assets/agent_record-wf-c32-53bd0bae.4dd22bf3c65a3cb4.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c33-0d69c278.html","id":"wf:C33","title":"Data Encryption & In-Use Protection Operations","type":"workflow","url":"/controls/assets/agent_record-wf-c33-0d69c278.66c1e0d3c8c0cb05.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c34-d94fc91f.html","id":"wf:C34","title":"Workplace & Remote Work Security Cycle","type":"workflow","url":"/controls/assets/agent_record-wf-c34-d94fc91f.2d04452fd3b7523c.json"},{"attributes":{"department":"facilities","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c35-f84d44e2.html","id":"wf:C35","title":"Facility Access Administration & Monitoring","type":"workflow","url":"/controls/assets/agent_record-wf-c35-f84d44e2.7c4cd0b34d3031be.json"},{"attributes":{"department":"facilities","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c36-f731c649.html","id":"wf:C36","title":"Environmental & Utility Systems Maintenance","type":"workflow","url":"/controls/assets/agent_record-wf-c36-f731c649.4b0e702880aff39e.json"},{"attributes":{"department":"facilities","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c37-107d42eb.html","id":"wf:C37","title":"Equipment Maintenance, Movement & Marking Control","type":"workflow","url":"/controls/assets/agent_record-wf-c37-107d42eb.0d2647d58b4ff6c2.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c38-485b6728.html","id":"wf:C38","title":"IT Asset Inventory & Classification Upkeep","type":"workflow","url":"/controls/assets/agent_record-wf-c38-485b6728.2351cb03ba1fb973.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c39-df8b318a.html","id":"wf:C39","title":"Endpoint, Media & Information Handling Custody","type":"workflow","url":"/controls/assets/agent_record-wf-c39-df8b318a.b808d4fa6fed5ff5.json"},{"attributes":{"department":"operations","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c4-4c0ca700.html","id":"wf:C4","title":"Control Design","type":"workflow","url":"/controls/assets/agent_record-wf-c4-4c0ca700.195b062852bb6ebf.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c40-440c22b9.html","id":"wf:C40","title":"IT Availability & Resilient Failure Operations","type":"workflow","url":"/controls/assets/agent_record-wf-c40-440c22b9.e2f12521da3f0ef5.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c41-f5b6a3b6.html","id":"wf:C41","title":"Change & Release Management (CAB)","type":"workflow","url":"/controls/assets/agent_record-wf-c41-f5b6a3b6.04b37541f8ea41ad.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c42-b0991cdd.html","id":"wf:C42","title":"Secure Baseline & Integrity Drift Management","type":"workflow","url":"/controls/assets/agent_record-wf-c42-b0991cdd.cf540603e406b6a1.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c43-e401f9da.html","id":"wf:C43","title":"Authorized Software & Component Integrity Control","type":"workflow","url":"/controls/assets/agent_record-wf-c43-e401f9da.c648130b5487e9cf.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c44-c8ff29dd.html","id":"wf:C44","title":"Malware, Email & Web Content Defense Operations","type":"workflow","url":"/controls/assets/agent_record-wf-c44-c8ff29dd.b9276e5dc0a704fb.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c45-81c87a11.html","id":"wf:C45","title":"Deception, Honeytoken & OPSEC Concealment Operations","type":"workflow","url":"/controls/assets/agent_record-wf-c45-81c87a11.13a29345dd9cd5cd.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c46-88a88be6.html","id":"wf:C46","title":"Secure Development & Release Security Gate","type":"workflow","url":"/controls/assets/agent_record-wf-c46-88a88be6.6ddd4b643156c0f2.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c47-ef7838c6.html","id":"wf:C47","title":"Controlled Hardware & System Maintenance","type":"workflow","url":"/controls/assets/agent_record-wf-c47-ef7838c6.cb616c975c9b325a.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c48-1fcd5f42.html","id":"wf:C48","title":"Network Segmentation & Boundary Rule Management","type":"workflow","url":"/controls/assets/agent_record-wf-c48-1fcd5f42.f3bcc43819a2bebd.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c49-5eff4769.html","id":"wf:C49","title":"Secure Connectivity & Network Trust Services Operation","type":"workflow","url":"/controls/assets/agent_record-wf-c49-5eff4769.ecd79e1893f9db24.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"monitor"},"htmlUrl":"/controls/agents/records/wf-c5-907af9a4.html","id":"wf:C5","title":"Identity Assurance Review","type":"workflow","url":"/controls/assets/agent_record-wf-c5-907af9a4.043d9651fd5d2c0c.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c50-4402d67a.html","id":"wf:C50","title":"Platform Isolation & Separation Enforcement","type":"workflow","url":"/controls/assets/agent_record-wf-c50-4402d67a.8bc79d47a83eab28.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c51-460f7a67.html","id":"wf:C51","title":"Resilient Architecture & Non-Persistence Operations","type":"workflow","url":"/controls/assets/agent_record-wf-c51-460f7a67.266949978f79d7b3.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c52-fa969595.html","id":"wf:C52","title":"Audit Logging Coverage & Integrity Operations","type":"workflow","url":"/controls/assets/agent_record-wf-c52-fa969595.7cc7790d9efa5e32.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c53-cbf08eb0.html","id":"wf:C53","title":"Security Monitoring & Detection Operations","type":"workflow","url":"/controls/assets/agent_record-wf-c53-cbf08eb0.1c738c5d32a7038f.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c54-ed6c01d8.html","id":"wf:C54","title":"User Activity & External Exposure Monitoring","type":"workflow","url":"/controls/assets/agent_record-wf-c54-ed6c01d8.2a5c03ca7f80d452.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c55-3a35dd8b.html","id":"wf:C55","title":"Network & Provider Service Monitoring","type":"workflow","url":"/controls/assets/agent_record-wf-c55-3a35dd8b.cd9ff06cee65ca30.json"},{"attributes":{"department":"facilities","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c56-eae7b190.html","id":"wf:C56","title":"Physical Environment Monitoring Review","type":"workflow","url":"/controls/assets/agent_record-wf-c56-eae7b190.36052877fc93d71d.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c57-d3460b57.html","id":"wf:C57","title":"Incident Response Readiness Program","type":"workflow","url":"/controls/assets/agent_record-wf-c57-d3460b57.152bb032ce74304a.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c58-49a2df23.html","id":"wf:C58","title":"Resilience & Failover Readiness Verification","type":"workflow","url":"/controls/assets/agent_record-wf-c58-49a2df23.de9c238c6691f59b.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c59-cff1f3d7.html","id":"wf:C59","title":"IT Operations & Capacity Management Cycle","type":"workflow","url":"/controls/assets/agent_record-wf-c59-cff1f3d7.e3f749bc515752ac.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"monitor"},"htmlUrl":"/controls/agents/records/wf-c6-8bc75783.html","id":"wf:C6","title":"ISMS Risk Assessment & Treatment Cycle","type":"workflow","url":"/controls/assets/agent_record-wf-c6-8bc75783.c416fde12fe7e098.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c60-62941eb6.html","id":"wf:C60","title":"Supply-Chain Integrity & OPSEC Operations","type":"workflow","url":"/controls/assets/agent_record-wf-c60-62941eb6.4193f1647f7c1eaf.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c61-3da91ad5.html","id":"wf:C61","title":"Secure SDLC Phase-Gate Program","type":"workflow","url":"/controls/assets/agent_record-wf-c61-3da91ad5.e52f9945dbc950b1.json"},{"attributes":{"department":"procurement","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c63-6a1e26cb.html","id":"wf:C63","title":"Outsourced & Critical-Component Development Oversight","type":"workflow","url":"/controls/assets/agent_record-wf-c63-6a1e26cb.e8f4bd21848304e1.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c64-5695dd2f.html","id":"wf:C64","title":"Technology Lifecycle & Capacity Review","type":"workflow","url":"/controls/assets/agent_record-wf-c64-5695dd2f.5727e023347d9eb0.json"},{"attributes":{"department":"ai-governance","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c65-09b9172f.html","id":"wf:C65","title":"AI Operations Monitoring & Incident Response","type":"workflow","url":"/controls/assets/agent_record-wf-c65-09b9172f.25af9fd927a21190.json"},{"attributes":{"department":"ai-governance","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c66-26a4ed19.html","id":"wf:C66","title":"AI Guardrail Configuration & Agent Permission Review","type":"workflow","url":"/controls/assets/agent_record-wf-c66-26a4ed19.13447fd00f254fd1.json"},{"attributes":{"department":"ai-governance","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c67-2d6bb2c2.html","id":"wf:C67","title":"Quarterly Third-Party AI Evaluation Cycle","type":"workflow","url":"/controls/assets/agent_record-wf-c67-2d6bb2c2.b8a314029c135dc0.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c68-08a38288.html","id":"wf:C68","title":"Offboarding & Access Revocation","type":"workflow","url":"/controls/assets/agent_record-wf-c68-08a38288.9cd31ead627e0997.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c69-7c87609e.html","id":"wf:C69","title":"Onboarding & Access Provisioning","type":"workflow","url":"/controls/assets/agent_record-wf-c69-7c87609e.332169dcf00513d3.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"monitor"},"htmlUrl":"/controls/agents/records/wf-c7-acbef2ee.html","id":"wf:C7","title":"ISO 27001 SoA Review & Controls Assessment","type":"workflow","url":"/controls/assets/agent_record-wf-c7-acbef2ee.0edc1ead8656287b.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c70-28fe2122.html","id":"wf:C70","title":"Transfer & Access Modification","type":"workflow","url":"/controls/assets/agent_record-wf-c70-28fe2122.6289c8653d5e5521.json"},{"attributes":{"department":"operations","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c71-7cec1736.html","id":"wf:C71","title":"Remediation Delivery & Validation","type":"workflow","url":"/controls/assets/agent_record-wf-c71-7cec1736.c1849b6947bafe1a.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c72-51c36efe.html","id":"wf:C72","title":"Periodic User Access Review","type":"workflow","url":"/controls/assets/agent_record-wf-c72-51c36efe.074b24f94f47fc2f.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c73-fad85eca.html","id":"wf:C73","title":"Backup & Recovery Testing","type":"workflow","url":"/controls/assets/agent_record-wf-c73-fad85eca.89bbea1383a06832.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c74-a348dee7.html","id":"wf:C74","title":"Job Scheduling & Batch Monitoring","type":"workflow","url":"/controls/assets/agent_record-wf-c74-a348dee7.822cf9f554062dcc.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c75-3dd1badd.html","id":"wf:C75","title":"Change Request, Approval & Migration","type":"workflow","url":"/controls/assets/agent_record-wf-c75-3dd1badd.ac15442a3903bcb5.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c76-70fa58ab.html","id":"wf:C76","title":"Data Conversion & Migration","type":"workflow","url":"/controls/assets/agent_record-wf-c76-70fa58ab.17e2b42e2ebfc7ed.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c77-2c09e1aa.html","id":"wf:C77","title":"Emergency Change","type":"workflow","url":"/controls/assets/agent_record-wf-c77-2c09e1aa.44ae28c6ff68d604.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c78-90d3f69d.html","id":"wf:C78","title":"End-User Computing Inventory & Validation","type":"workflow","url":"/controls/assets/agent_record-wf-c78-90d3f69d.9e0964f98f221c33.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c79-423d98cd.html","id":"wf:C79","title":"New System Implementation (SDLC)","type":"workflow","url":"/controls/assets/agent_record-wf-c79-423d98cd.8471118acaafceb7.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"monitor"},"htmlUrl":"/controls/agents/records/wf-c8-5634a289.html","id":"wf:C8","title":"NIST RMF System Authorization (ATO) Cycle","type":"workflow","url":"/controls/assets/agent_record-wf-c8-5634a289.64634b7e97a0d962.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c80-7d360115.html","id":"wf:C80","title":"Incident & Problem Management","type":"workflow","url":"/controls/assets/agent_record-wf-c80-7d360115.109a3b556880c79c.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"htmlUrl":"/controls/agents/records/wf-c81-7e13787b.html","id":"wf:C81","title":"Privileged Access Review","type":"workflow","url":"/controls/assets/agent_record-wf-c81-7e13787b.fb41e923c0b9e535.json"},{"attributes":{"department":"it","domain":"controls","lineOfDefense":"assure"},"htmlUrl":"/controls/agents/records/wf-c9-75fb1752.html","id":"wf:C9","title":"Security Control Assessment & POA&M Remediation","type":"workflow","url":"/controls/assets/agent_record-wf-c9-75fb1752.1a715cf6a9c5adff.json"},{"attributes":{"department":"internal-audit","domain":"audit","lineOfDefense":"assure"},"htmlUrl":"/controls/agents/records/wf-d01-41c8c187.html","id":"wf:D01","title":"Control Design Assessment","type":"workflow","url":"/controls/assets/agent_record-wf-d01-41c8c187.ad90bfd56a1d03fe.json"}],"schemaVersion":1,"total":212}