{"catalogRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","guide":"/controls/agents/data.md","indexes":[{"htmlUrl":"/controls/agents/indexes/all/page-1.html","total":1677,"type":"all","url":"/controls/assets/agent_indexes-all-1.f508a2978b3ab554.json"},{"htmlUrl":"/controls/agents/indexes/standard/page-1.html","total":25,"type":"standard","url":"/controls/assets/agent_indexes-standard-1.18bbc791d4c13576.json"},{"htmlUrl":"/controls/agents/indexes/control/page-1.html","total":979,"type":"control","url":"/controls/assets/agent_indexes-control-1.f1799e077dcf85fa.json"},{"htmlUrl":"/controls/agents/indexes/unified/page-1.html","total":289,"type":"unified","url":"/controls/assets/agent_indexes-unified-1.6f14ff1c60ae9bac.json"},{"htmlUrl":"/controls/agents/indexes/risk/page-1.html","total":172,"type":"risk","url":"/controls/assets/agent_indexes-risk-1.3a8e40de389490f5.json"},{"htmlUrl":"/controls/agents/indexes/workflow/page-1.html","total":212,"type":"workflow","url":"/controls/assets/agent_indexes-workflow-1.8b2ca1ce4c4b6b2d.json"}],"kind":"catalog","metadata":"/controls/assets/agent_metadata.81c6e647e4a8b977.json","recordDirectory":"/controls/assets/agent_indexes-all-1.f508a2978b3ab554.json","resolution":"Pin this catalog, then follow immutable asset URLs. Resolve relationship endpoint IDs through recordDirectory. Stable detail paths require an exact catalogRevision match.","schema":"/controls/assets/agent_schema.50d8927c298565d3.json","schemaVersion":1,"sources":[{"htmlUrl":"/controls/agents/sources/aiuc-1.html","id":"std:aiuc-1","slug":"aiuc-1","title":"AIUC-1 (Jul 2026)","total":179,"url":"/controls/assets/agent_sources-aiuc-1-1.572c4ed500c3776b.json"},{"htmlUrl":"/controls/agents/sources/ccpa.html","id":"std:ccpa","slug":"ccpa","title":"CCPA/CPRA","total":53,"url":"/controls/assets/agent_sources-ccpa-1.d460597b14f247b4.json"},{"htmlUrl":"/controls/agents/sources/cobit-2019.html","id":"std:cobit-2019","slug":"cobit-2019","title":"COBIT 2019","total":208,"url":"/controls/assets/agent_sources-cobit-2019-1.8159a353300d5e04.json"},{"htmlUrl":"/controls/agents/sources/coso-erm.html","id":"std:coso-erm","slug":"coso-erm","title":"COSO ERM 2017","total":101,"url":"/controls/assets/agent_sources-coso-erm-1.876a8d93b4b43f8b.json"},{"htmlUrl":"/controls/agents/sources/coso-ic.html","id":"std:coso-ic","slug":"coso-ic","title":"COSO IC 2013","total":124,"url":"/controls/assets/agent_sources-coso-ic-1.12732687c5247e62.json"},{"htmlUrl":"/controls/agents/sources/dora.html","id":"std:dora","slug":"dora","title":"EU DORA","total":44,"url":"/controls/assets/agent_sources-dora-1.41dbd011b52fcd6c.json"},{"htmlUrl":"/controls/agents/sources/eu-ai-act.html","id":"std:eu-ai-act","slug":"eu-ai-act","title":"EU AI Act","total":90,"url":"/controls/assets/agent_sources-eu-ai-act-1.e5616012cea0b270.json"},{"htmlUrl":"/controls/agents/sources/gdpr.html","id":"std:gdpr","slug":"gdpr","title":"EU GDPR","total":87,"url":"/controls/assets/agent_sources-gdpr-1.9158a8d471e04640.json"},{"htmlUrl":"/controls/agents/sources/hipaa.html","id":"std:hipaa","slug":"hipaa","title":"HIPAA","total":105,"url":"/controls/assets/agent_sources-hipaa-1.6c123fd386a5c544.json"},{"htmlUrl":"/controls/agents/sources/iia-2024.html","id":"std:iia-2024","slug":"iia-2024","title":"IIA 2024 Standards","total":147,"url":"/controls/assets/agent_sources-iia-2024-1.ab63c1a57978bcdc.json"},{"htmlUrl":"/controls/agents/sources/iia-pos-2026-erm.html","id":"std:iia-pos-2026-erm","slug":"iia-pos-2026-erm","title":"The Role of the Internal Audit Function in Enterprise Risk Management","total":23,"url":"/controls/assets/agent_sources-iia-pos-2026-erm-1.ad43c0f6a32fc986.json"},{"htmlUrl":"/controls/agents/sources/iia-pos-2026-three-lines.html","id":"std:iia-pos-2026-three-lines","slug":"iia-pos-2026-three-lines","title":"Three Lines Model: Assurance and Advice in Support of Effective Governance","total":26,"url":"/controls/assets/agent_sources-iia-pos-2026-three-lines-1.da6f3c605ed07410.json"},{"htmlUrl":"/controls/agents/sources/iso-27001.html","id":"std:iso-27001","slug":"iso-27001","title":"ISO/IEC 27001:2022","total":380,"url":"/controls/assets/agent_sources-iso-27001-1.997ee8a3f4372e58.json"},{"htmlUrl":"/controls/agents/sources/iso-31000.html","id":"std:iso-31000","slug":"iso-31000","title":"ISO 31000:2018","total":85,"url":"/controls/assets/agent_sources-iso-31000-1.122c081362c8df95.json"},{"htmlUrl":"/controls/agents/sources/iso-42001.html","id":"std:iso-42001","slug":"iso-42001","title":"ISO/IEC 42001:2023 (AI)","total":91,"url":"/controls/assets/agent_sources-iso-42001-1.3d0ccd58d3a7a17b.json"},{"htmlUrl":"/controls/agents/sources/nis2.html","id":"std:nis2","slug":"nis2","title":"EU NIS2","total":60,"url":"/controls/assets/agent_sources-nis2-1.812ca9d740f775f5.json"},{"htmlUrl":"/controls/agents/sources/nist-800-53.html","id":"std:nist-800-53","slug":"nist-800-53","title":"NIST SP 800-53 Rev5","total":720,"url":"/controls/assets/agent_sources-nist-800-53-1.8f6e946286105bb2.json"},{"htmlUrl":"/controls/agents/sources/nist-ai-agent-identity.html","id":"std:nist-ai-agent-identity","slug":"nist-ai-agent-identity","title":"NIST Agent Identity (draft, Feb 2026)","total":82,"url":"/controls/assets/agent_sources-nist-ai-agent-identity-1.1d8269f69b3f3606.json"},{"htmlUrl":"/controls/agents/sources/nist-ai-tevv-athlon.html","id":"std:nist-ai-tevv-athlon","slug":"nist-ai-tevv-athlon","title":"NIST TEVV-Athlon (draft, Aug 2026)","total":50,"url":"/controls/assets/agent_sources-nist-ai-tevv-athlon-1.9d3dd0b4f171f747.json"},{"htmlUrl":"/controls/agents/sources/nist-csf-2.html","id":"std:nist-csf-2","slug":"nist-csf-2","title":"NIST CSF 2.0","total":385,"url":"/controls/assets/agent_sources-nist-csf-2-1.e1cae29c051ce68c.json"},{"htmlUrl":"/controls/agents/sources/nydfs-500.html","id":"std:nydfs-500","slug":"nydfs-500","title":"NYDFS Part 500","total":128,"url":"/controls/assets/agent_sources-nydfs-500-1.2cdbc0fa3d4791b9.json"},{"htmlUrl":"/controls/agents/sources/pci-dss.html","id":"std:pci-dss","slug":"pci-dss","title":"PCI DSS v4.0.1","total":84,"url":"/controls/assets/agent_sources-pci-dss-1.d81b6a873954bde7.json"},{"htmlUrl":"/controls/agents/sources/soc1.html","id":"std:soc1","slug":"soc1","title":"SOC 1","total":80,"url":"/controls/assets/agent_sources-soc1-1.4b2bde596318799a.json"},{"htmlUrl":"/controls/agents/sources/soc2.html","id":"std:soc2","slug":"soc2","title":"SOC 2 (TSC)","total":319,"url":"/controls/assets/agent_sources-soc2-1.83ad486a246bf96c.json"},{"htmlUrl":"/controls/agents/sources/sox.html","id":"std:sox","slug":"sox","title":"SOX / PCAOB (ICFR)","total":131,"url":"/controls/assets/agent_sources-sox-1.55d46530f801fa3a.json"}],"title":"Controls Map public compliance catalog","topics":[{"htmlUrl":"/controls/agents/topics/ai-governance.html","slug":"ai-governance","title":"AI Governance","total":428,"url":"/controls/assets/agent_topics-ai-governance-1.924b095233786ed9.json"},{"htmlUrl":"/controls/agents/topics/access-control-identity-management.html","slug":"access-control-identity-management","title":"Access Control & Identity Management","total":294,"url":"/controls/assets/agent_topics-access-control-identity-management-1.16d42a0a0ae04bda.json"},{"htmlUrl":"/controls/agents/topics/asset-management-inventory.html","slug":"asset-management-inventory","title":"Asset Management & Inventory","total":193,"url":"/controls/assets/agent_topics-asset-management-inventory-1.d9506a30b4af7efb.json"},{"htmlUrl":"/controls/agents/topics/awareness-training.html","slug":"awareness-training","title":"Awareness & Training","total":139,"url":"/controls/assets/agent_topics-awareness-training-1.bc9f2283663c8439.json"},{"htmlUrl":"/controls/agents/topics/business-continuity-disaster-recovery.html","slug":"business-continuity-disaster-recovery","title":"Business Continuity & Disaster Recovery","total":336,"url":"/controls/assets/agent_topics-business-continuity-disaster-recovery-1.1bac224862e2fef3.json"},{"htmlUrl":"/controls/agents/topics/compliance-audit-assurance.html","slug":"compliance-audit-assurance","title":"Compliance, Audit & Assurance","total":801,"url":"/controls/assets/agent_topics-compliance-audit-assurance-1.38f0c202dcb4bc5f.json"},{"htmlUrl":"/controls/agents/topics/cryptography-key-management.html","slug":"cryptography-key-management","title":"Cryptography & Key Management","total":83,"url":"/controls/assets/agent_topics-cryptography-key-management-1.42a7fc892193de14.json"},{"htmlUrl":"/controls/agents/topics/data-protection-privacy.html","slug":"data-protection-privacy","title":"Data Protection & Privacy","total":702,"url":"/controls/assets/agent_topics-data-protection-privacy-1.be70b0eaf939dcb5.json"},{"htmlUrl":"/controls/agents/topics/financial-reporting-controls-sox.html","slug":"financial-reporting-controls-sox","title":"Financial Reporting Controls (SOX)","total":331,"url":"/controls/assets/agent_topics-financial-reporting-controls-sox-1.ec5f999bc358bfd7.json"},{"htmlUrl":"/controls/agents/topics/governance-policy-oversight.html","slug":"governance-policy-oversight","title":"Governance, Policy & Oversight","total":731,"url":"/controls/assets/agent_topics-governance-policy-oversight-1.3ac293658d95f5bd.json"},{"htmlUrl":"/controls/agents/topics/human-resources-personnel-security.html","slug":"human-resources-personnel-security","title":"Human Resources / Personnel Security","total":197,"url":"/controls/assets/agent_topics-human-resources-personnel-security-1.3f6776c4473aced1.json"},{"htmlUrl":"/controls/agents/topics/incident-management-response.html","slug":"incident-management-response","title":"Incident Management & Response","total":239,"url":"/controls/assets/agent_topics-incident-management-response-1.74d178aa7dc62fd0.json"},{"htmlUrl":"/controls/agents/topics/logging-monitoring-detection.html","slug":"logging-monitoring-detection","title":"Logging, Monitoring & Detection","total":377,"url":"/controls/assets/agent_topics-logging-monitoring-detection-1.b09eb980bab8d6da.json"},{"htmlUrl":"/controls/agents/topics/network-communications-security.html","slug":"network-communications-security","title":"Network & Communications Security","total":380,"url":"/controls/assets/agent_topics-network-communications-security-1.103410bc9e640a8d.json"},{"htmlUrl":"/controls/agents/topics/physical-environmental-security.html","slug":"physical-environmental-security","title":"Physical & Environmental Security","total":173,"url":"/controls/assets/agent_topics-physical-environmental-security-1.1fe867d2252990da.json"},{"htmlUrl":"/controls/agents/topics/risk-assessment-management.html","slug":"risk-assessment-management","title":"Risk Assessment & Management","total":673,"url":"/controls/assets/agent_topics-risk-assessment-management-1.daa4ffc77b8c2a4d.json"},{"htmlUrl":"/controls/agents/topics/secure-configuration-change-management.html","slug":"secure-configuration-change-management","title":"Secure Configuration & Change Management","total":271,"url":"/controls/assets/agent_topics-secure-configuration-change-management-1.854fb375c5fb87b1.json"},{"htmlUrl":"/controls/agents/topics/secure-development-sdlc-application-security.html","slug":"secure-development-sdlc-application-security","title":"Secure Development (SDLC) & Application Security","total":423,"url":"/controls/assets/agent_topics-secure-development-sdlc-application-security-1.6514dbba8b01341d.json"},{"htmlUrl":"/controls/agents/topics/third-party-supply-chain-risk.html","slug":"third-party-supply-chain-risk","title":"Third-Party / Supply-Chain Risk","total":275,"url":"/controls/assets/agent_topics-third-party-supply-chain-risk-1.0a0b3d2e4f9948a4.json"},{"htmlUrl":"/controls/agents/topics/vulnerability-patch-management.html","slug":"vulnerability-patch-management","title":"Vulnerability & Patch Management","total":250,"url":"/controls/assets/agent_topics-vulnerability-patch-management-1.d8de5ce8b46b0d6f.json"}],"totals":{"records":1677,"relationships":3909}}