{"catalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","download":{"releaseId":"sha256:f813f907d36dc47fc73d1a2d9a7f0167e219ccba3cbd9c3c1e684719e350f9e1","slug":"grc-system-third-party-risk-review","url":"/controls/assets/agent_workflow-grc-system-third-party-risk-review-3e6a28b9.eb66edfb2ee51f67.json"},"kind":"record","record":{"attributes":{"department":"risk-management","domain":"grc","lineOfDefense":"monitor"},"canonicalUrl":"https://assureswarm.com/workflows/all/?w=grc-system-third-party-risk-review","description":"Runs on the existing system item. Review system and provider dependencies, assess current risk and control evidence, select response actions, and approve the review record. Deliver the reviewed result and open actions to the responsible register owner and the named companion procedure.","details":{"canonicalUrl":"https://assureswarm.com/workflows/all/?w=grc-system-third-party-risk-review","capabilities":["system-third-party-risk-review"],"controls":["UC-RISK-18","UC-CONFIG-10","UC-TPRM-02","UC-TPRM-04","UC-TPRM-08"],"domains":["grc"],"lineOfDefense":"monitor","mappingStatus":"mapped","releaseId":"sha256:f813f907d36dc47fc73d1a2d9a7f0167e219ccba3cbd9c3c1e684719e350f9e1","roleIntegrity":{"activityCount":0,"ermPhases":[],"lineRoles":[],"serviceModes":[],"warnings":[]},"sourceTemplateId":"workflow-library:grc-system-third-party-risk-review","standards":["iso-27001","nist-800-53","soc2"],"teams":["risk-management","it","procurement"]},"id":"wf:D55","mapUrl":"https://assureswarm.com/controls/?v=1&node=wf%3AD55","slug":"grc-system-third-party-risk-review","sourceIds":["aiuc-1","iso-27001","nist-800-53","nist-csf-2","soc2"],"sourceUrl":null,"title":"System and Third-Party Risk Review","type":"workflow"},"relationships":[{"expectedCatalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","id":"rel:43d7e062ec9a2b5e6cde1456bd143ba1ee5580574be59a579604864e20cafc85","properties":{},"sourceDetailPath":"/controls/data/v1/records/wf-d55-248b03a5.json","sourceId":"wf:D55","targetDetailPath":"/controls/data/v1/records/uc-uc-tprm-02-c35b26eb.json","targetId":"uc:UC-TPRM-02","type":"operates"},{"expectedCatalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","id":"rel:656ac62569a0bb48ad16dfeedf7baf6154882714af6ad0539f9a6cdb2613fc40","properties":{},"sourceDetailPath":"/controls/data/v1/records/wf-d55-248b03a5.json","sourceId":"wf:D55","targetDetailPath":"/controls/data/v1/records/uc-uc-tprm-04-e6aef252.json","targetId":"uc:UC-TPRM-04","type":"operates"},{"expectedCatalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","id":"rel:7343a8f2d902c6be8f8b8a101f0ecbe48bc9218fb14d40824311bf617cf79997","properties":{},"sourceDetailPath":"/controls/data/v1/records/wf-d55-248b03a5.json","sourceId":"wf:D55","targetDetailPath":"/controls/data/v1/records/uc-uc-tprm-08-6de49908.json","targetId":"uc:UC-TPRM-08","type":"operates"},{"expectedCatalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","id":"rel:ab32e2107522b3034bdf9db923f37f6e55d8bc6453012ec5d5f642b6d9561cf2","properties":{},"sourceDetailPath":"/controls/data/v1/records/wf-d55-248b03a5.json","sourceId":"wf:D55","targetDetailPath":"/controls/data/v1/records/uc-uc-risk-18-23752e70.json","targetId":"uc:UC-RISK-18","type":"operates"},{"expectedCatalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","id":"rel:dea7699380c1dafca18784059ac4d3587cbcf7b1a11953320aea6345e2334f98","properties":{},"sourceDetailPath":"/controls/data/v1/records/wf-d55-248b03a5.json","sourceId":"wf:D55","targetDetailPath":"/controls/data/v1/records/uc-uc-config-10-921518b8.json","targetId":"uc:UC-CONFIG-10","type":"operates"}],"schemaVersion":1}