{"catalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","kind":"record","record":{"attributes":{"category":"operational","domain":["Risk Assessment & Management","Governance, Policy & Oversight"],"inherent_rating":"medium","taxonomy":["coso-erm-risk"]},"canonicalUrl":"https://assureswarm.com/controls/?v=1&node=risk%3Agov-project-change-management","description":"Large programs — ERP implementations, digital transformations, or major capital projects — fail to deliver expected benefits on time and within budget due to poor governance, scope creep, or capability gaps.","details":{"category":"operational","impact":"medium","inherent_rating":"medium","likelihood":"medium","risk_id":"gov-project-change-management","taxonomies":["coso-erm-risk"],"treatment":"mitigate"},"id":"risk:gov-project-change-management","mapUrl":"https://assureswarm.com/controls/?v=1&node=risk%3Agov-project-change-management","sourceIds":["cobit-2019","iso-27001","iso-31000","nist-csf-2"],"sourceUrl":null,"title":"Major project / program delivery failure","type":"risk"},"relationships":[{"expectedCatalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","id":"rel:b9ee85d756575a42f52b717386da075f3819594150c1259ce288f7cd4c991789","properties":{"rationale":"A.5.8 member requires infosec risk addressed in project management from initiation to delivery, contributing to project governance and fewer delivery surprises.","strength":"related"},"sourceDetailPath":"/controls/data/v1/records/uc-uc-risk-02-0f8519bb.json","sourceId":"uc:UC-RISK-02","targetDetailPath":"/controls/data/v1/records/risk-gov-project-change-management-335e75ed.json","targetId":"risk:gov-project-change-management","type":"mitigates"},{"expectedCatalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","id":"rel:dd9d8286abfa7cbc2ff1e138194eeacbd1628516f0f3cee72d3eef79635dc724","properties":{"rationale":"Monitoring programs against expected benefits and terminating underperformers curbs delivery failures.","strength":"related"},"sourceDetailPath":"/controls/data/v1/records/uc-uc-gov-13-81b348eb.json","sourceId":"uc:UC-GOV-13","targetDetailPath":"/controls/data/v1/records/risk-gov-project-change-management-335e75ed.json","targetId":"risk:gov-project-change-management","type":"mitigates"}],"schemaVersion":1}