{"catalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","download":{"releaseId":"sha256:78bdb9c4a50f04683e349c4b3b41f4cdd4fb60c43e84d6943754c398d8e870d3","slug":"sox-scoping-decision","url":"/controls/assets/agent_workflow-sox-scoping-decision-85aca4a1.36a423d9a450b378.json"},"kind":"record","record":{"attributes":{"department":"finance","domain":"sox","lineOfDefense":"monitor"},"canonicalUrl":"https://assureswarm.com/workflows/all/?w=sox-scoping-decision","description":"Runs on the existing Process item for the one business process under decision — it enriches that Process item and the Control and Risk items in its RCM, never creating a duplicate. Determine whether the process is SOX-relevant and, if so, scope its key controls — otherwise document the exclusion. Consumes the Annual ICFR Scoping & Risk Assessment handoff package (accepted materiality set, scoping thresholds, aggregation floor). Named deliverables: the assessment worksheet, the SOX-relevance determination memo, the resulting Risk & Control Matrix (RCM) scope (Control and Risk items with live links), and the exclusion memo — compiled into a signed scoping decision package. Hands that signed package off to the downstream SOX Process Walkthrough for the in-scope slice, or routes a full exclusion into the annual monitoring/refresh cycle. Out of scope: entity-level materiality, significant accounts, and fraud-risk assessment, which are owned by the upstream Annual ICFR Scoping & Risk Assessment, and process understanding and control verification, which are owned by the downstream SOX Process Walkthrough.","details":{"canonicalUrl":"https://assureswarm.com/workflows/all/?w=sox-scoping-decision","capabilities":[],"controls":["UC-RISK-08","UC-RISK-11"],"domains":["sox"],"lineOfDefense":"monitor","mappingStatus":"mapped","releaseId":"sha256:78bdb9c4a50f04683e349c4b3b41f4cdd4fb60c43e84d6943754c398d8e870d3","roleIntegrity":{"activityCount":0,"ermPhases":[],"lineRoles":[],"serviceModes":[],"warnings":[]},"sourceTemplateId":"workflow-library:sox-scoping-decision","standards":["sox","coso-ic"],"teams":["finance"]},"id":"wf:S7","mapUrl":"https://assureswarm.com/controls/?v=1&node=wf%3AS7","slug":"sox-scoping-decision","sourceIds":["coso-erm","coso-ic","iso-31000","nist-csf-2","soc2"],"sourceUrl":null,"title":"SOX Scoping Decision","type":"workflow"},"relationships":[{"expectedCatalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","id":"rel:6b4a66550e01e8e2854f3b3d4aa96fa61b43572582716db62677d15e06e61337","properties":{},"sourceDetailPath":"/controls/data/v1/records/wf-s7-e8f6281e.json","sourceId":"wf:S7","targetDetailPath":"/controls/data/v1/records/uc-uc-risk-11-3f5d23ea.json","targetId":"uc:UC-RISK-11","type":"oversees"},{"expectedCatalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","id":"rel:edeb696283039988ca14dffd4519c388d538d13cd2db6fa544fd79ba4b6c2b3b","properties":{},"sourceDetailPath":"/controls/data/v1/records/wf-s7-e8f6281e.json","sourceId":"wf:S7","targetDetailPath":"/controls/data/v1/records/uc-uc-risk-08-5f27bebc.json","targetId":"uc:UC-RISK-08","type":"oversees"}],"schemaVersion":1}