{"catalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","download":{"releaseId":"sha256:33eb1287dc82bdaa5a9269543a1b855bb71af63c00a848775edb62d5dcbe6949","slug":"sox-deficiency-remediation","url":"/controls/assets/agent_workflow-sox-deficiency-remediation-3ab06039.2a997595cce8d47e.json"},"kind":"record","record":{"attributes":{"department":"finance","domain":"sox","lineOfDefense":"monitor"},"canonicalUrl":"https://assureswarm.com/workflows/all/?w=sox-deficiency-remediation","description":"SOX Deficiency Remediation carries one control deficiency's full lifecycle — grade, root cause, remediation, validation, and closure. The workflow runs on the deficiency **Issue item** it opens at grading — `issue_type` set to the exact SOX grade (deficiency / significant_deficiency / material_weakness) and `severity` on the mapped AssureSwarm scale — linked to the affected Control(s), the source Control-hosted SOX testing workflow (template kind: sox-testing), and the current-year SOX audit (Audit, `audit_type: sox_testing`); the remediation actions and the validation retest live as steps on this Issue's own workflow. In scope: a single deficiency triggered by a failed test or unresolved exception. It **consumes** the concluded, reviewed failed-test workpaper handoff package owned upstream (SOX Key Control TOD/TOE Test and SOX ITGC Testing) and **hands off** the closed-or-carried deficiency outcome — with its intact severity history and any triggered communication obligations — to Quarterly Board & Audit-Committee GRC Reporting, which aggregates the full deficiency population into the period's ICFR conclusion and audit-committee materials. It exchanges handoff packages with those related workflows rather than duplicating their work.","details":{"canonicalUrl":"https://assureswarm.com/workflows/all/?w=sox-deficiency-remediation","capabilities":[],"controls":["UC-RISK-14","UC-AUDIT-17"],"domains":["sox"],"lineOfDefense":"monitor","mappingStatus":"mapped","releaseId":"sha256:33eb1287dc82bdaa5a9269543a1b855bb71af63c00a848775edb62d5dcbe6949","roleIntegrity":{"activityCount":0,"ermPhases":[],"lineRoles":[],"serviceModes":[],"warnings":[]},"sourceTemplateId":"workflow-library:sox-deficiency-remediation","standards":["sox","coso-ic"],"teams":["finance"]},"id":"wf:S3","mapUrl":"https://assureswarm.com/controls/?v=1&node=wf%3AS3","slug":"sox-deficiency-remediation","sourceIds":["iia-2024","nist-800-53","nist-csf-2","soc2"],"sourceUrl":null,"title":"SOX Deficiency Remediation","type":"workflow"},"relationships":[{"expectedCatalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","id":"rel:1d91d30656aa69c195e6359265a95d445cc7626eb4b45a349e69b6eab0da234c","properties":{},"sourceDetailPath":"/controls/data/v1/records/wf-s3-0d4673bb.json","sourceId":"wf:S3","targetDetailPath":"/controls/data/v1/records/uc-uc-audit-17-94dc7e0c.json","targetId":"uc:UC-AUDIT-17","type":"oversees"},{"expectedCatalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","id":"rel:807d133d67b44710c9c60794b198d6f6060299b5fc2befcabd673a3263ce7197","properties":{},"sourceDetailPath":"/controls/data/v1/records/wf-s3-0d4673bb.json","sourceId":"wf:S3","targetDetailPath":"/controls/data/v1/records/uc-uc-risk-14-a5d6281b.json","targetId":"uc:UC-RISK-14","type":"oversees"}],"schemaVersion":1}