{"catalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","kind":"record","record":{"attributes":{"category":"administrative","domain":"Secure Development (SDLC) & Application Security","type":"preventive"},"canonicalUrl":"https://assureswarm.com/controls/?v=1&node=uc%3AUC-SDLC-14","description":"Plan and agree audit and assurance testing of operational systems between the tester and appropriate management before testing begins: define and approve scope, limit testers to read-only access where possible or use isolated copies, schedule tests to minimize disruption, and monitor and log all audit access.","details":{"control_category":"administrative","control_type":"preventive","domain":"Secure Development (SDLC) & Application Security","guidance":[],"members":[{"control_id":"A.8.34","coverage":"full","framework":"iso-27001","relationship":"equal"}],"statement":"Plan and agree audit and assurance testing of operational systems between the tester and appropriate management before testing begins: define and approve scope, limit testers to read-only access where possible or use isolated copies, schedule tests to minimize disruption, and monitor and log all audit access.","title":"Protect production systems during audit testing","unified_id":"UC-SDLC-14"},"id":"uc:UC-SDLC-14","mapUrl":"https://assureswarm.com/controls/?v=1&node=uc%3AUC-SDLC-14","sourceIds":["iso-27001"],"sourceUrl":null,"title":"UC-SDLC-14 — Protect production systems during audit testing","type":"unified"},"relationships":[{"expectedCatalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","id":"rel:44bab248029aef50efd571ac843f5a4fd7daa6a700820f0fad211eac27e548d4","properties":{"control_id":"A.8.34","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"equal","source_version":"2022"},"sourceDetailPath":"/controls/data/v1/records/uc-uc-sdlc-14-5c9b0e48.json","sourceId":"uc:UC-SDLC-14","targetDetailPath":"/controls/data/v1/records/ctrl-iso-27001-a-8-34-22833492.json","targetId":"ctrl:iso-27001:A.8.34","type":"maps_to"},{"expectedCatalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","id":"rel:4f246e5a1616f45f0d4b08fed6f4779c383a8822767e63331ecc527198dacac2","properties":{"rationale":"Restricting audit testers to read-only access or isolated copies prevents accidental or intentional alteration/deletion of production data during testing.","strength":"primary"},"sourceDetailPath":"/controls/data/v1/records/uc-uc-sdlc-14-5c9b0e48.json","sourceId":"uc:UC-SDLC-14","targetDetailPath":"/controls/data/v1/records/risk-data-corruption-integrity-loss-e771738a.json","targetId":"risk:data-corruption-integrity-loss","type":"mitigates"},{"expectedCatalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","id":"rel:8332f5f06e3b5be66e450cab1e8aa764df11c627752367b18944c7026c3f1be2","properties":{"rationale":"Limiting testers to read-only/isolated copies and scheduling tests to minimize disruption prevents audit testing from degrading production availability.","strength":"primary"},"sourceDetailPath":"/controls/data/v1/records/uc-uc-sdlc-14-5c9b0e48.json","sourceId":"uc:UC-SDLC-14","targetDetailPath":"/controls/data/v1/records/risk-tech-software-system-failure-2e2c5364.json","targetId":"risk:tech-software-system-failure","type":"mitigates"},{"expectedCatalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","id":"rel:c66b92cf49f1f5d5eed1e71adb152dcbe855ee8a8b1fbde477babbd7c46def7a","properties":{},"sourceDetailPath":"/controls/data/v1/records/wf-c10-29ff1ddb.json","sourceId":"wf:C10","targetDetailPath":"/controls/data/v1/records/uc-uc-sdlc-14-5c9b0e48.json","targetId":"uc:UC-SDLC-14","type":"operates"},{"expectedCatalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","id":"rel:f8b4aacf42d19fae5426a59cc947eb6eb064aacb6e8d91be3399a07cc819ada0","properties":{},"sourceDetailPath":"/controls/data/v1/records/wf-d06-c9616fb8.json","sourceId":"wf:D06","targetDetailPath":"/controls/data/v1/records/uc-uc-sdlc-14-5c9b0e48.json","targetId":"uc:UC-SDLC-14","type":"tests"}],"schemaVersion":1}