{"catalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","kind":"index","name":"control","next":"/assets/agent_indexes-control-2.547844379c3a1314.json","page":1,"pageSize":100,"records":[{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-a001-a1b59a6f.html","id":"ctrl:aiuc-1:A001","title":"A001 — Establish input data policy","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-a001-a1b59a6f.9375cbe5da79eeee.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-a002-1cad7f1d.html","id":"ctrl:aiuc-1:A002","title":"A002 — Establish output data policy","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-a002-1cad7f1d.90f75c42edbe20eb.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-a003-bea61fd9.html","id":"ctrl:aiuc-1:A003","title":"A003 — Limit AI agent data access","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-a003-bea61fd9.046b370e6cc057fa.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-a004-0955d43a.html","id":"ctrl:aiuc-1:A004","title":"A004 — Protect IP & trade secrets","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-a004-0955d43a.1af1f09ee2ec42f4.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-a005-12903764.html","id":"ctrl:aiuc-1:A005","title":"A005 — Prevent cross-customer data exposure","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-a005-12903764.54139520a9a846f5.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-a006-846858b8.html","id":"ctrl:aiuc-1:A006","title":"A006 — Prevent PII leakage","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-a006-846858b8.36611cad904c5a17.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-a007-c9925452.html","id":"ctrl:aiuc-1:A007","title":"A007 — Prevent IP violations","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-a007-c9925452.1a29f7ebaf3ebcb6.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-a008-509139e6.html","id":"ctrl:aiuc-1:A008","title":"A008 — Prevent leakage of credentials and secrets","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-a008-509139e6.272588d7d66f4616.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-b001-19a54ee3.html","id":"ctrl:aiuc-1:B001","title":"B001 — Third-party testing of adversarial robustness","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-b001-19a54ee3.64b04d73f3abef65.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"detective"},"htmlUrl":"/agents/records/ctrl-aiuc-1-b002-07a4b0e1.html","id":"ctrl:aiuc-1:B002","title":"B002 — Detect adversarial input","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-b002-07a4b0e1.15a85559f2becc71.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-b003-8c740cc9.html","id":"ctrl:aiuc-1:B003","title":"B003 — Manage public release of technical details","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-b003-8c740cc9.1b7428ccdf261aab.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-b004-d4ff3b14.html","id":"ctrl:aiuc-1:B004","title":"B004 — Prevent AI endpoint scraping","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-b004-d4ff3b14.30c7d7c5f6c99475.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"detective"},"htmlUrl":"/agents/records/ctrl-aiuc-1-b005-fe985c7b.html","id":"ctrl:aiuc-1:B005","title":"B005 — Implement real-time input filtering","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-b005-fe985c7b.d6a135e0d88df899.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-b006-2951b397.html","id":"ctrl:aiuc-1:B006","title":"B006 — Prevent unauthorized AI agent actions","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-b006-2951b397.3610ed3f97998fc5.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-b007-151dfcd3.html","id":"ctrl:aiuc-1:B007","title":"B007 — Enforce user access privileges to AI systems","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-b007-151dfcd3.da4b87b9cbb3dbdc.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-b008-39c816b1.html","id":"ctrl:aiuc-1:B008","title":"B008 — Protect AI system deployment environment","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-b008-39c816b1.bd2bbaf8b774e0ea.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-b009-20336550.html","id":"ctrl:aiuc-1:B009","title":"B009 — Limit output over-exposure","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-b009-20336550.81cfa7c8f501d347.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-b010-a075f8e3.html","id":"ctrl:aiuc-1:B010","title":"B010 — Promote secure patterns in generated code","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-b010-a075f8e3.73d997d4bd929ea5.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-c001-6bc6c173.html","id":"ctrl:aiuc-1:C001","title":"C001 — Define AI risk taxonomy","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-c001-6bc6c173.96bdf10c364b9040.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-c002-6c739dcb.html","id":"ctrl:aiuc-1:C002","title":"C002 — Conduct pre-deployment testing","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-c002-6c739dcb.941e0001440e97d1.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-c003-5536e2c9.html","id":"ctrl:aiuc-1:C003","title":"C003 — Prevent harmful outputs","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-c003-5536e2c9.543d57d4a4a1813b.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-c004-04abe3a2.html","id":"ctrl:aiuc-1:C004","title":"C004 — Prevent out-of-scope outputs","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-c004-04abe3a2.afae05acdf126b26.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-c005-c8242756.html","id":"ctrl:aiuc-1:C005","title":"C005 — Prevent agent-specific high risk outputs","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-c005-c8242756.eedd5cb0294e546e.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-c006-d03e5b11.html","id":"ctrl:aiuc-1:C006","title":"C006 — Prevent output vulnerabilities","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-c006-d03e5b11.eec0852da3dff1e1.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-c007-ebb82753.html","id":"ctrl:aiuc-1:C007","title":"C007 — Flag high risk outputs for human review","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-c007-ebb82753.be6a0101d64eb304.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"detective"},"htmlUrl":"/agents/records/ctrl-aiuc-1-c008-94bd64f2.html","id":"ctrl:aiuc-1:C008","title":"C008 — Monitor AI risk categories","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-c008-94bd64f2.ba3c43b2e877cb9e.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-c009-d98e532e.html","id":"ctrl:aiuc-1:C009","title":"C009 — Enable real-time feedback and intervention","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-c009-d98e532e.651e46e454533440.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-c010-b0a758b4.html","id":"ctrl:aiuc-1:C010","title":"C010 — Third-party testing for harmful outputs","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-c010-b0a758b4.8b68f26b8fe69ccb.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-c011-7889db41.html","id":"ctrl:aiuc-1:C011","title":"C011 — Third-party testing for out-of-scope outputs","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-c011-7889db41.4cc288c524ea3a49.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-c012-783c55df.html","id":"ctrl:aiuc-1:C012","title":"C012 — Third-party testing for customer-defined risk","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-c012-783c55df.16eb92a98daaccb0.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-d001-628b833f.html","id":"ctrl:aiuc-1:D001","title":"D001 — Prevent hallucinated outputs","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-d001-628b833f.22203bc17b61ce2a.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-d002-34554b38.html","id":"ctrl:aiuc-1:D002","title":"D002 — Third-party testing for hallucinations","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-d002-34554b38.edb0ffec2f39f388.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-d003-9f8f52f3.html","id":"ctrl:aiuc-1:D003","title":"D003 — Restrict unsafe tool calls","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-d003-9f8f52f3.53ac24ebd9cc0ecc.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-d004-21d4eeb4.html","id":"ctrl:aiuc-1:D004","title":"D004 — Third-party testing of tool calls","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-d004-21d4eeb4.b265770723c2fde4.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-e001-ec2a2db9.html","id":"ctrl:aiuc-1:E001","title":"E001 — AI failure plan for security breaches","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-e001-ec2a2db9.09e487ed50669bce.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-e002-aa262146.html","id":"ctrl:aiuc-1:E002","title":"E002 — AI failure plan for harmful outputs","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-e002-aa262146.ef8d53e56494fccd.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-e003-2e1c73ec.html","id":"ctrl:aiuc-1:E003","title":"E003 — AI failure plan for hallucinations","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-e003-2e1c73ec.4246eaba319ed1a7.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-e004-a07a7b59.html","id":"ctrl:aiuc-1:E004","title":"E004 — Assign accountability","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-e004-a07a7b59.d2b450aa50b3e531.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-e005-8a88c16c.html","id":"ctrl:aiuc-1:E005","title":"E005 — Document data storage security","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-e005-8a88c16c.8bda2c9ddd6e875f.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-e006-362f564d.html","id":"ctrl:aiuc-1:E006","title":"E006 — Conduct vendor due diligence","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-e006-362f564d.72ef166cf0e4c7fc.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-e008-c8f7f0e4.html","id":"ctrl:aiuc-1:E008","title":"E008 — Review internal processes","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-e008-c8f7f0e4.b12e38448c87be5d.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-e009-5269a385.html","id":"ctrl:aiuc-1:E009","title":"E009 — Monitor third-party access","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-e009-5269a385.edee2a0d7d1b46e2.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-e010-250d0c25.html","id":"ctrl:aiuc-1:E010","title":"E010 — Establish AI acceptable use policy","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-e010-250d0c25.45d10f77a1e5d2bc.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-e011-56758692.html","id":"ctrl:aiuc-1:E011","title":"E011 — Record processing locations","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-e011-56758692.2f61197e322bd00d.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-e012-78a3be53.html","id":"ctrl:aiuc-1:E012","title":"E012 — Document regulatory compliance","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-e012-78a3be53.153da704c2c91633.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-e013-7efd0f38.html","id":"ctrl:aiuc-1:E013","title":"E013 — Implement quality management system","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-e013-7efd0f38.af25b42e8a03c3b5.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"detective"},"htmlUrl":"/agents/records/ctrl-aiuc-1-e015-94a0c8ea.html","id":"ctrl:aiuc-1:E015","title":"E015 — Log AI system activity","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-e015-94a0c8ea.aafa4b04d3d12698.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-e016-8f16478c.html","id":"ctrl:aiuc-1:E016","title":"E016 — Implement AI disclosure mechanisms","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-e016-8f16478c.0ccc0375f08918ec.json"},{"attributes":{"category":"administrative","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-e017-016942cc.html","id":"ctrl:aiuc-1:E017","title":"E017 — Document system transparency policy","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-e017-016942cc.2be9936adfb20d5e.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"preventive"},"htmlUrl":"/agents/records/ctrl-aiuc-1-f001-af1458a3.html","id":"ctrl:aiuc-1:F001","title":"F001 — Prevent AI cyber misuse","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-f001-af1458a3.f235f45e6f98bf1b.json"},{"attributes":{"category":"technical","framework":"aiuc-1","type":"detective"},"htmlUrl":"/agents/records/ctrl-aiuc-1-f002-82f3b392.html","id":"ctrl:aiuc-1:F002","title":"F002 — Prevent catastrophic misuse","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-aiuc-1-f002-82f3b392.eb4087232e15543e.json"},{"attributes":{"category":"administrative","framework":"ccpa","type":"preventive"},"htmlUrl":"/agents/records/ctrl-ccpa-ccpa-1798-100-b353d024.html","id":"ctrl:ccpa:CCPA-1798.100","title":"CCPA-1798.100 — Notice at collection and consumer right to know","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-ccpa-ccpa-1798-100-b353d024.b2e63e7bdfc2c83b.json"},{"attributes":{"category":"administrative","framework":"ccpa","type":"corrective"},"htmlUrl":"/agents/records/ctrl-ccpa-ccpa-1798-105-fdc06468.html","id":"ctrl:ccpa:CCPA-1798.105","title":"CCPA-1798.105 — Right to delete personal information","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-ccpa-ccpa-1798-105-fdc06468.54ac0894de037004.json"},{"attributes":{"category":"administrative","framework":"ccpa","type":"corrective"},"htmlUrl":"/agents/records/ctrl-ccpa-ccpa-1798-106-35bf5a6c.html","id":"ctrl:ccpa:CCPA-1798.106","title":"CCPA-1798.106 — Right to correct inaccurate personal information","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-ccpa-ccpa-1798-106-35bf5a6c.dd21001da0e2ca23.json"},{"attributes":{"category":"administrative","framework":"ccpa","type":"preventive"},"htmlUrl":"/agents/records/ctrl-ccpa-ccpa-1798-110-115-cf470a0c.html","id":"ctrl:ccpa:CCPA-1798.110-115","title":"CCPA-1798.110-115 — Rights to access and disclosure of personal information collected, sold, or shared","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-ccpa-ccpa-1798-110-115-cf470a0c.46b645dd403c604d.json"},{"attributes":{"category":"administrative","framework":"ccpa","type":"preventive"},"htmlUrl":"/agents/records/ctrl-ccpa-ccpa-1798-120-121-7655ba5c.html","id":"ctrl:ccpa:CCPA-1798.120-121","title":"CCPA-1798.120-121 — Right to opt out of sale/sharing and to limit use of sensitive personal information","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-ccpa-ccpa-1798-120-121-7655ba5c.f94fdc193a6448f3.json"},{"attributes":{"category":"administrative","framework":"ccpa","type":"preventive"},"htmlUrl":"/agents/records/ctrl-ccpa-ccpa-1798-125-f0016e3a.html","id":"ctrl:ccpa:CCPA-1798.125","title":"CCPA-1798.125 — Non-discrimination and financial-incentive requirements","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-ccpa-ccpa-1798-125-f0016e3a.9c23200d80813931.json"},{"attributes":{"category":"administrative","framework":"ccpa","type":"preventive"},"htmlUrl":"/agents/records/ctrl-ccpa-ccpa-1798-130-135-f5dd6b5b.html","id":"ctrl:ccpa:CCPA-1798.130-135","title":"CCPA-1798.130-135 — Request-handling mechanics, verification, and opt-out link requirements","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-ccpa-ccpa-1798-130-135-f5dd6b5b.e4cec79df35e4e04.json"},{"attributes":{"category":"administrative","framework":"ccpa","type":"preventive"},"htmlUrl":"/agents/records/ctrl-ccpa-ccpa-1798-140-775f9cfa.html","id":"ctrl:ccpa:CCPA-1798.140","title":"CCPA-1798.140 — Service-provider and contractor contract requirements","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-ccpa-ccpa-1798-140-775f9cfa.b72c38e4a2cedf17.json"},{"attributes":{"category":"technical","framework":"ccpa","type":"preventive"},"htmlUrl":"/agents/records/ctrl-ccpa-ccpa-1798-150-da298199.html","id":"ctrl:ccpa:CCPA-1798.150","title":"CCPA-1798.150 — Reasonable security procedures; private right of action for breaches","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-ccpa-ccpa-1798-150-da298199.42d8dde0edbc5b3d.json"},{"attributes":{"category":"administrative","framework":"ccpa","type":"detective"},"htmlUrl":"/agents/records/ctrl-ccpa-ccpa-1798-185-1b524211.html","id":"ctrl:ccpa:CCPA-1798.185","title":"CCPA-1798.185 — CPPA regulations: cybersecurity audits and risk assessments","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-ccpa-ccpa-1798-185-1b524211.f2847ff93537134b.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-apo01-d6a49088.html","id":"ctrl:cobit-2019:APO01","title":"APO01 — Managed I&T Management Framework","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-apo01-d6a49088.19eb739670cbeefa.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-apo02-52b0bcbe.html","id":"ctrl:cobit-2019:APO02","title":"APO02 — Managed Strategy","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-apo02-52b0bcbe.fb15d13ded037621.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-apo03-5d678454.html","id":"ctrl:cobit-2019:APO03","title":"APO03 — Managed Enterprise Architecture","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-apo03-5d678454.1a9e5efdcae6c109.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-apo04-e419c159.html","id":"ctrl:cobit-2019:APO04","title":"APO04 — Managed Innovation","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-apo04-e419c159.1351de70eb570957.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-apo05-ea9d3f42.html","id":"ctrl:cobit-2019:APO05","title":"APO05 — Managed Portfolio","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-apo05-ea9d3f42.9ab6e25afb1489c2.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-apo06-2191e824.html","id":"ctrl:cobit-2019:APO06","title":"APO06 — Managed Budget and Costs","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-apo06-2191e824.0b1d19d5406b964b.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-apo07-20c9bdf0.html","id":"ctrl:cobit-2019:APO07","title":"APO07 — Managed Human Resources","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-apo07-20c9bdf0.c3dd5df9f8385364.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-apo08-6c76314b.html","id":"ctrl:cobit-2019:APO08","title":"APO08 — Managed Relationships","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-apo08-6c76314b.b3b429ef9adce266.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-apo09-2d1f48e2.html","id":"ctrl:cobit-2019:APO09","title":"APO09 — Managed Service Agreements","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-apo09-2d1f48e2.9f76be42d5d70ae1.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-apo10-2c3cb0dc.html","id":"ctrl:cobit-2019:APO10","title":"APO10 — Managed Vendors","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-apo10-2c3cb0dc.f76307aee511a538.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-apo11-92538e06.html","id":"ctrl:cobit-2019:APO11","title":"APO11 — Managed Quality","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-apo11-92538e06.165e62c552d956b5.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-apo12-9086e034.html","id":"ctrl:cobit-2019:APO12","title":"APO12 — Managed Risk","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-apo12-9086e034.d9341dc64f9b6417.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-apo13-b83b9404.html","id":"ctrl:cobit-2019:APO13","title":"APO13 — Managed Security","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-apo13-b83b9404.f1af13bedf83460e.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-apo14-ab650d02.html","id":"ctrl:cobit-2019:APO14","title":"APO14 — Managed Data","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-apo14-ab650d02.da44de93744596fd.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-bai01-12e2e132.html","id":"ctrl:cobit-2019:BAI01","title":"BAI01 — Managed Programs","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-bai01-12e2e132.ac6d0b6af7d362db.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-bai02-80041b74.html","id":"ctrl:cobit-2019:BAI02","title":"BAI02 — Managed Requirements Definition","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-bai02-80041b74.c5ceb308f51616e1.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-bai03-bfe681b0.html","id":"ctrl:cobit-2019:BAI03","title":"BAI03 — Managed Solutions Identification and Build","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-bai03-bfe681b0.19bb1d3a4af3c2ea.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-bai04-c6901e71.html","id":"ctrl:cobit-2019:BAI04","title":"BAI04 — Managed Availability and Capacity","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-bai04-c6901e71.a3154774c43863a3.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-bai05-782c2ba0.html","id":"ctrl:cobit-2019:BAI05","title":"BAI05 — Managed Organizational Change","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-bai05-782c2ba0.7927971a91d98c5a.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-bai06-306e8a70.html","id":"ctrl:cobit-2019:BAI06","title":"BAI06 — Managed IT Changes","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-bai06-306e8a70.86c082dfc838d0e9.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-bai07-dcabfa26.html","id":"ctrl:cobit-2019:BAI07","title":"BAI07 — Managed IT Change Acceptance and Transitioning","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-bai07-dcabfa26.39f16072d1c0ed34.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-bai08-9f5f3d72.html","id":"ctrl:cobit-2019:BAI08","title":"BAI08 — Managed Knowledge","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-bai08-9f5f3d72.d4e01db76277bdc0.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-bai09-09a008c3.html","id":"ctrl:cobit-2019:BAI09","title":"BAI09 — Managed Assets","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-bai09-09a008c3.f5e7aa4bd9511d01.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-bai10-40479176.html","id":"ctrl:cobit-2019:BAI10","title":"BAI10 — Managed Configuration","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-bai10-40479176.633397e758d0b397.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-bai11-fbe7d977.html","id":"ctrl:cobit-2019:BAI11","title":"BAI11 — Managed Projects","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-bai11-fbe7d977.eb5129a2db35e6b5.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-dss01-d3ff2961.html","id":"ctrl:cobit-2019:DSS01","title":"DSS01 — Managed Operations","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-dss01-d3ff2961.3f77ed9cdadedc9a.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"corrective"},"htmlUrl":"/agents/records/ctrl-cobit-2019-dss02-af5bca5d.html","id":"ctrl:cobit-2019:DSS02","title":"DSS02 — Managed Service Requests and Incidents","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-dss02-af5bca5d.d9218a4b31c470e5.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"corrective"},"htmlUrl":"/agents/records/ctrl-cobit-2019-dss03-2540740f.html","id":"ctrl:cobit-2019:DSS03","title":"DSS03 — Managed Problems","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-dss03-2540740f.3bd6a028b224e2af.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"corrective"},"htmlUrl":"/agents/records/ctrl-cobit-2019-dss04-2d611bca.html","id":"ctrl:cobit-2019:DSS04","title":"DSS04 — Managed Continuity","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-dss04-2d611bca.8070467762e011f7.json"},{"attributes":{"category":"technical","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-dss05-80cfe6d8.html","id":"ctrl:cobit-2019:DSS05","title":"DSS05 — Managed Security Services","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-dss05-80cfe6d8.99e95f4288e74e9f.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-dss06-c2b31b0e.html","id":"ctrl:cobit-2019:DSS06","title":"DSS06 — Managed Business Process Controls","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-dss06-c2b31b0e.bddee764f99ee89e.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-edm01-95fe0a96.html","id":"ctrl:cobit-2019:EDM01","title":"EDM01 — Ensured Governance Framework Setting and Maintenance","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-edm01-95fe0a96.73dfc575a0f65a54.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-edm02-4b1996ae.html","id":"ctrl:cobit-2019:EDM02","title":"EDM02 — Ensured Benefits Delivery","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-edm02-4b1996ae.b6093f4f1c719ac7.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-edm03-5708b8c4.html","id":"ctrl:cobit-2019:EDM03","title":"EDM03 — Ensured Risk Optimization","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-edm03-5708b8c4.e128ff60f92bcc02.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-edm04-7ad4bdc3.html","id":"ctrl:cobit-2019:EDM04","title":"EDM04 — Ensured Resource Optimization","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-edm04-7ad4bdc3.17dea6b7d6f181cf.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"htmlUrl":"/agents/records/ctrl-cobit-2019-edm05-c0483b9a.html","id":"ctrl:cobit-2019:EDM05","title":"EDM05 — Ensured Stakeholder Engagement","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-edm05-c0483b9a.db4e6288e2bb8b13.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"detective"},"htmlUrl":"/agents/records/ctrl-cobit-2019-mea01-d0c28364.html","id":"ctrl:cobit-2019:MEA01","title":"MEA01 — Managed Performance and Conformance Monitoring","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-mea01-d0c28364.250827869485b8ec.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"detective"},"htmlUrl":"/agents/records/ctrl-cobit-2019-mea02-4513eb15.html","id":"ctrl:cobit-2019:MEA02","title":"MEA02 — Managed System of Internal Control","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-mea02-4513eb15.54fb88417ce9a189.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"detective"},"htmlUrl":"/agents/records/ctrl-cobit-2019-mea03-99c7dcca.html","id":"ctrl:cobit-2019:MEA03","title":"MEA03 — Managed Compliance With External Requirements","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-mea03-99c7dcca.4c2a519aba50add0.json"}],"schemaVersion":1,"total":979}