{"catalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","download":{"releaseId":"sha256:d20364d10b1e992e61583953f4e4860db97c276d8f6e80cb88b0bd1042db33c8","slug":"controls-system-categorization-planning-authorization","url":"/controls/assets/agent_workflow-controls-system-categorization-planning-authorization-c06df4ca.b858c9946039095b.json"},"kind":"record","record":{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"canonicalUrl":"https://assureswarm.com/workflows/all/?w=controls-system-categorization-planning-authorization","description":"Operator workflow for the system owner and authorizing official to categorize a system by impact and criticality, maintain the approved system security and privacy plan, authorize internal connections, and grant and track authorization to operate, as a decision-aware flow with categorization-approval and authorization branches. In scope: a single system — its impact and criticality categorization, the system security and privacy plan, internal-connection authorization, and the authorization-to-operate decision with reauthorization tracking. Out of scope: the control assessments and testing that feed the authorization risk view (consumed as an input) and enterprise categorization-policy setting; there is no upstream or downstream workflow, so any cross-workflow dependency is declared as a step input rather than routed.","details":{"canonicalUrl":"https://assureswarm.com/workflows/all/?w=controls-system-categorization-planning-authorization","capabilities":[],"controls":["UC-RISK-18","UC-GOV-18","UC-AUDIT-26"],"domains":["controls"],"lineOfDefense":"operate","mappingStatus":"mapped","releaseId":"sha256:d20364d10b1e992e61583953f4e4860db97c276d8f6e80cb88b0bd1042db33c8","roleIntegrity":{"activityCount":0,"ermPhases":[],"lineRoles":[],"serviceModes":[],"warnings":[]},"sourceTemplateId":"workflow-library:controls-system-categorization-planning-authorization","standards":["nist-800-53"],"teams":["it","compliance-legal"]},"id":"wf:C24","mapUrl":"https://assureswarm.com/controls/?v=1&node=wf%3AC24","slug":"controls-system-categorization-planning-authorization","sourceIds":["nist-800-53"],"sourceUrl":null,"title":"System Categorization, Security Planning & Authorization","type":"workflow"},"relationships":[{"expectedCatalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","id":"rel:2d426686837ee3a83ab5d4eb309b160dd1831dba8ed91202530b257de1e922b2","properties":{},"sourceDetailPath":"/controls/data/v1/records/wf-c24-000b9f1d.json","sourceId":"wf:C24","targetDetailPath":"/controls/data/v1/records/uc-uc-gov-18-680359d2.json","targetId":"uc:UC-GOV-18","type":"operates"},{"expectedCatalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","id":"rel:64ecb25913c9fd315ec017e8b5a042f5449f98d0c168671c93970dee902680a4","properties":{},"sourceDetailPath":"/controls/data/v1/records/wf-c24-000b9f1d.json","sourceId":"wf:C24","targetDetailPath":"/controls/data/v1/records/uc-uc-risk-18-23752e70.json","targetId":"uc:UC-RISK-18","type":"operates"},{"expectedCatalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","id":"rel:b7caeed24da4e8e13deb2ffd4774086bfed35722f82b3844ef0bfa8aa2abaa79","properties":{},"sourceDetailPath":"/controls/data/v1/records/wf-c24-000b9f1d.json","sourceId":"wf:C24","targetDetailPath":"/controls/data/v1/records/uc-uc-audit-26-3a91d068.json","targetId":"uc:UC-AUDIT-26","type":"operates"}],"schemaVersion":1}