unified
UC-RISK-14 — Track deficiencies to closure with remediation action plans
Control deficiencies and assessment findings are evaluated and communicated in a timely manner to the parties responsible for corrective action, including senior management and the board as appropriate. A remediation action plan (or equivalent log) documents planned corrective actions, owners, required resources, and completion dates for each finding. Plans are maintained, kept current, and tracked through closure.
In catalog since 2026-09-17T22:28:00Z · Last changed 2026-09-17T22:28:00Z (f368a6cce277)
Record JSON · Open in map · Data retrieval guide
Catalog revision: 791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4. A connection does not establish full coverage.
Attributes
- domain
- Risk Assessment & Management
- type
- corrective
- category
- administrative
Details
- unified_id
- UC-RISK-14
- title
- Track deficiencies to closure with remediation action plans
- statement
- Control deficiencies and assessment findings are evaluated and communicated in a timely manner to the parties responsible for corrective action, including senior management and the board as appropriate. A remediation action plan (or equivalent log) documents planned corrective actions, owners, required resources, and completion dates for each finding. Plans are maintained, kept current, and tracked through closure.
- domain
- Risk Assessment & Management
- control_type
- corrective
- control_category
- administrative
- members
- framework
- nist-800-53
- control_id
- CA-5
- coverage
- full
- relationship
- superset_of
- framework
- nist-800-53
- control_id
- PM-4
- coverage
- full
- relationship
- superset_of
- framework
- soc2
- control_id
- CC4.2
- coverage
- full
- relationship
- superset_of
- guidance
Source
No record-specific source URL is provided.
Connections
- Risk & Control Self-Assessment (RCSA) Program operates UC-RISK-14 — Track deficiencies to closure with remediation action plans
- Continuous Controls Monitoring (ISCM) Cycle oversees UC-RISK-14 — Track deficiencies to closure with remediation action plans
- SOC 2 Type II Interim Testing tests UC-RISK-14 — Track deficiencies to closure with remediation action plans
- Year-End Deficiency Aggregation & Severity Evaluation oversees UC-RISK-14 — Track deficiencies to closure with remediation action plans
- UC-RISK-14 — Track deficiencies to closure with remediation action plans maps_to CA-5 — Plan of Action and Milestones
- framework
- nist-800-53
- control_id
- CA-5
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- Rev. 5
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- IT Governance Objective Review (COBIT) oversees UC-RISK-14 — Track deficiencies to closure with remediation action plans
- ISO 27001 Stage 1 ISMS Documentation Review tests UC-RISK-14 — Track deficiencies to closure with remediation action plans
- Framework Adoption & Cross-Mapping oversees UC-RISK-14 — Track deficiencies to closure with remediation action plans
- Cybersecurity Incident Response operates UC-RISK-14 — Track deficiencies to closure with remediation action plans
- UC-RISK-14 — Track deficiencies to closure with remediation action plans mitigates Trade-counterparty performance and settlement disputes
- strength
- related
- rationale
- CSF 2.0 Profile & Maturity Assessment oversees UC-RISK-14 — Track deficiencies to closure with remediation action plans
- Deficiency Evaluation & Committee operates UC-RISK-14 — Track deficiencies to closure with remediation action plans
- Remediation Delivery operates UC-RISK-14 — Track deficiencies to closure with remediation action plans
- UC-RISK-14 — Track deficiencies to closure with remediation action plans mitigates Inadequate or absent risk assessment process
- strength
- related
- rationale
- Tracking deficiencies and findings to closure via remediation plans helps ensure identified issues are treated, but it is a corrective loop over findings, not the operative identify-analyse-evaluate-treat process; contributor.
- Regulatory Impact Analysis & Obligation Mapping oversees UC-RISK-14 — Track deficiencies to closure with remediation action plans
- Finding Remediation & Action-Plan Monitoring tests UC-RISK-14 — Track deficiencies to closure with remediation action plans
- SOC 2 Readiness & Evidence Collection oversees UC-RISK-14 — Track deficiencies to closure with remediation action plans
- SOX Deficiency Remediation oversees UC-RISK-14 — Track deficiencies to closure with remediation action plans
- ISO 27001 SoA Review & Controls Assessment oversees UC-RISK-14 — Track deficiencies to closure with remediation action plans
- Security Control Assessment & POA&M Remediation operates UC-RISK-14 — Track deficiencies to closure with remediation action plans
- Issue Triage & Disposition operates UC-RISK-14 — Track deficiencies to closure with remediation action plans
- GCP Physical and Environmental Subservice Reliance oversees UC-RISK-14 — Track deficiencies to closure with remediation action plans
- UC-RISK-14 — Track deficiencies to closure with remediation action plans maps_to CC4.2 — The entity evaluates and communicates internal control deficiencies in a timely manner to those parties responsible for taking corrective action, including senior management and the board of directors, as appropriate.
- framework
- soc2
- control_id
- CC4.2
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2017 TSC
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- Control Exception Evaluation and Remediation tests UC-RISK-14 — Track deficiencies to closure with remediation action plans
- SOC 2 Trust Services Readiness tests UC-RISK-14 — Track deficiencies to closure with remediation action plans
- Issue Remediation and Verification oversees UC-RISK-14 — Track deficiencies to closure with remediation action plans
- Remediation Delivery & Validation operates UC-RISK-14 — Track deficiencies to closure with remediation action plans
- UC-RISK-14 — Track deficiencies to closure with remediation action plans maps_to PM-4 — Plan of Action and Milestones Process
- framework
- nist-800-53
- control_id
- PM-4
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- Rev. 5
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- Domain Oversight and Management Review oversees UC-RISK-14 — Track deficiencies to closure with remediation action plans
- Quarterly Board & Audit-Committee GRC Reporting oversees UC-RISK-14 — Track deficiencies to closure with remediation action plans