{"catalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","kind":"index","name":"unified","next":"/assets/agent_indexes-unified-2.3020bfcb372fa5ff.json","page":1,"pageSize":100,"records":[{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-01-1e70b922.html","id":"uc:UC-ACCESS-01","title":"UC-ACCESS-01 — Provision and deprovision accounts through a managed lifecycle","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-access-01-1e70b922.0bef19fddb3b8d81.json"},{"attributes":{"category":"administrative","domain":"Access Control & Identity Management","type":"detective"},"htmlUrl":"/agents/records/uc-uc-access-02-0132e278.html","id":"uc:UC-ACCESS-02","title":"UC-ACCESS-02 — Review user access rights periodically","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-access-02-0132e278.5c7269decb1f81dc.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-03-43eeb212.html","id":"uc:UC-ACCESS-03","title":"UC-ACCESS-03 — Enforce least privilege, need-to-know, and segregation of duties","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-access-03-43eeb212.e8e1ab623e73e598.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-04-75180489.html","id":"uc:UC-ACCESS-04","title":"UC-ACCESS-04 — Restrict privileged rights, utilities, and unauthorized software","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-access-04-75180489.968849180a97350e.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-05-9b7f3e34.html","id":"uc:UC-ACCESS-05","title":"UC-ACCESS-05 — Enforce approved authorizations for information and functions","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-access-05-9b7f3e34.5b34b713276e818c.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-06-623f356c.html","id":"uc:UC-ACCESS-06","title":"UC-ACCESS-06 — Manage unique identities and identifiers end to end","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-access-06-623f356c.169aa07722bfc2f0.json"},{"attributes":{"category":"administrative","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-07-ed06e251.html","id":"uc:UC-ACCESS-07","title":"UC-ACCESS-07 — Proof identities before binding credentials","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-access-07-ed06e251.64f2d0a582457b0e.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-08-7c9dc13e.html","id":"uc:UC-ACCESS-08","title":"UC-ACCESS-08 — Manage and protect authenticators across their lifecycle","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-access-08-7c9dc13e.0ffca25ba50a6d30.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-09-444baafe.html","id":"uc:UC-ACCESS-09","title":"UC-ACCESS-09 — Authenticate all users with multi-factor authentication","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-access-09-444baafe.ee5f43fa1fd1f083.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-10-130762ce.html","id":"uc:UC-ACCESS-10","title":"UC-ACCESS-10 — Authenticate devices and services before granting connections","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-access-10-130762ce.6368bef21ea76320.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-11-d0c7a1b8.html","id":"uc:UC-ACCESS-11","title":"UC-ACCESS-11 — Defend logons against brute-force and anomalous attempts","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-access-11-d0c7a1b8.2365220d9b9610d1.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-12-8ef9e477.html","id":"uc:UC-ACCESS-12","title":"UC-ACCESS-12 — Lock, limit, and terminate user sessions","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-access-12-8ef9e477.a8a3f79bd2fa1167.json"},{"attributes":{"category":"technical","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-13-2ccf2dfa.html","id":"uc:UC-ACCESS-13","title":"UC-ACCESS-13 — Notify users of system terms and previous logon activity","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-access-13-2ccf2dfa.bbb59e09d40989e2.json"},{"attributes":{"category":"administrative","domain":"Access Control & Identity Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-14-99fd72b5.html","id":"uc:UC-ACCESS-14","title":"UC-ACCESS-14 — Authorize public content and external information sharing","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-access-14-99fd72b5.55976f640f4450dd.json"},{"attributes":{"category":"administrative","domain":"Governance, Policy & Oversight","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-15-84699cae.html","id":"uc:UC-ACCESS-15","title":"UC-ACCESS-15 — Design control activities over technology access","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-access-15-84699cae.1b28d26f8928cd2f.json"},{"attributes":{"category":"technical","domain":"Secure Configuration & Change Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-16-7a8d6d65.html","id":"uc:UC-ACCESS-16","title":"UC-ACCESS-16 — Authorize, test, and approve changes and development","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-access-16-7a8d6d65.87b1b316ad7736dc.json"},{"attributes":{"category":"technical","domain":"Business Continuity & Disaster Recovery","type":"corrective"},"htmlUrl":"/agents/records/uc-uc-access-17-c9ecd00d.html","id":"uc:UC-ACCESS-17","title":"UC-ACCESS-17 — Execute, monitor, and recover production processing","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-access-17-c9ecd00d.d1e1d43c7dc02d7b.json"},{"attributes":{"category":"technical","domain":"Logging, Monitoring & Detection","type":"detective"},"htmlUrl":"/agents/records/uc-uc-access-18-8ffbd456.html","id":"uc:UC-ACCESS-18","title":"UC-ACCESS-18 — Log and monitor system activity, capacity, and incidents","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-access-18-8ffbd456.0e0e290102746a32.json"},{"attributes":{"category":"physical","domain":"Physical & Environmental Security","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-19-08a17359.html","id":"uc:UC-ACCESS-19","title":"UC-ACCESS-19 — Restrict physical access and maintain environmental safeguards","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-access-19-08a17359.abb66dda9da8270e.json"},{"attributes":{"category":"technical","domain":"Financial Reporting Controls (SOX)","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-20-92554410.html","id":"uc:UC-ACCESS-20","title":"UC-ACCESS-20 — Ensure complete, accurate, and authorized data processing","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-access-20-92554410.59ac0fc633a2d344.json"},{"attributes":{"category":"administrative","domain":"Third-Party / Supply-Chain Risk","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-access-21-14f45683.html","id":"uc:UC-ACCESS-21","title":"UC-ACCESS-21 — Manage subservice organizations supporting the system","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-access-21-14f45683.e7664fe7caa37f35.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-01-156cdd4f.html","id":"uc:UC-AI-01","title":"UC-AI-01 — Maintain and periodically review the AI policy","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-ai-01-156cdd4f.bdc08c756be14761.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-02-d2679f4e.html","id":"uc:UC-AI-02","title":"UC-AI-02 — Define AI roles, responsibilities, and competencies","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-ai-02-d2679f4e.7d904eadb6c78119.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-03-cba029bc.html","id":"uc:UC-AI-03","title":"UC-AI-03 — Document AI system resources and dependencies","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-ai-03-cba029bc.f4b570ef86f8bdbd.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-04-b35afd39.html","id":"uc:UC-AI-04","title":"UC-AI-04 — Assess impacts and classify AI systems before deployment","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-ai-04-b35afd39.cfff5b8b985f2034.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-05-d0edecc1.html","id":"uc:UC-AI-05","title":"UC-AI-05 — Set responsible AI development objectives and requirements","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-ai-05-d0edecc1.99471c86e0c3b5ca.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-06-f47eedcb.html","id":"uc:UC-AI-06","title":"UC-AI-06 — Maintain AI system technical documentation","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-ai-06-f47eedcb.c21da6ce0cdf0824.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-07-9c5c9573.html","id":"uc:UC-AI-07","title":"UC-AI-07 — Verify, validate, and control AI deployment and changes","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-ai-07-9c5c9573.87842a1c4549ebfd.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"detective"},"htmlUrl":"/agents/records/uc-uc-ai-08-fada68b7.html","id":"uc:UC-AI-08","title":"UC-AI-08 — Log and monitor AI system behavior in operation","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-ai-08-fada68b7.6e442459d1e63636.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-09-d6934cb6.html","id":"uc:UC-AI-09","title":"UC-AI-09 — Govern AI data quality, provenance, and preparation","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-ai-09-d6934cb6.eb39914922fb45bc.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-10-f53dd533.html","id":"uc:UC-AI-10","title":"UC-AI-10 — Meet transparency obligations for AI systems","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-ai-10-f53dd533.927f362816e01764.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"detective"},"htmlUrl":"/agents/records/uc-uc-ai-11-7112e573.html","id":"uc:UC-AI-11","title":"UC-AI-11 — Operate AI concern, incident, and external reporting channels","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-ai-11-7112e573.c080ae9d1d37b898.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-12-ff5c3c6a.html","id":"uc:UC-AI-12","title":"UC-AI-12 — Enforce responsible and lawful use of AI systems","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-ai-12-ff5c3c6a.0d95503297bbe2df.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-13-2ce71d80.html","id":"uc:UC-AI-13","title":"UC-AI-13 — Assign AI value-chain roles and discharge obligations","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-ai-13-2ce71d80.70b88157de589d5e.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-14-cc67739e.html","id":"uc:UC-AI-14","title":"UC-AI-14 — Manage responsible AI with suppliers and customers","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-ai-14-cc67739e.9b26d9b0be5ad401.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-15-eb9589c6.html","id":"uc:UC-AI-15","title":"UC-AI-15 — Fulfill general-purpose AI model provider obligations","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-ai-15-eb9589c6.09891c1e6513cd2c.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-16-b95e2895.html","id":"uc:UC-AI-16","title":"UC-AI-16 — Ensure human oversight of AI decisions","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-ai-16-b95e2895.8687a6f551e6a510.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-17-420198e3.html","id":"uc:UC-AI-17","title":"UC-AI-17 — Define customer data-use and output-rights policies for AI services","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-ai-17-420198e3.eb808453383435e2.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-18-f15ac93a.html","id":"uc:UC-AI-18","title":"UC-AI-18 — Defend AI interfaces against adversarial input, injection, and endpoint abuse","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-ai-18-f15ac93a.2a7418b4ca8f9fe5.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-19-535f3660.html","id":"uc:UC-AI-19","title":"UC-AI-19 — Constrain agent actions and tool use to authorized scope","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-ai-19-535f3660.795622aab74c7159.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-20-c0e507ce.html","id":"uc:UC-AI-20","title":"UC-AI-20 — Prevent harmful, out-of-scope, hallucinated, and over-exposed AI outputs","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-ai-20-c0e507ce.7e047e0c60e9e495.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"detective"},"htmlUrl":"/agents/records/uc-uc-ai-21-8afd47db.html","id":"uc:UC-AI-21","title":"UC-AI-21 — Commission independent third-party AI evaluations on a quarterly cadence","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-ai-21-8afd47db.71aa3e966bcefaa4.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-22-129d1e22.html","id":"uc:UC-AI-22","title":"UC-AI-22 — Prevent leakage of credentials and secrets through AI systems","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-ai-22-129d1e22.75f009c4f5ca6475.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-23-ea85f10d.html","id":"uc:UC-AI-23","title":"UC-AI-23 — Prevent misuse of AI systems for cyber offense and catastrophic harm","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-ai-23-ea85f10d.09352b7d4556b609.json"},{"attributes":{"category":"administrative","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-24-066ea393.html","id":"uc:UC-AI-24","title":"UC-AI-24 — Operate an AI quality management system","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-ai-24-066ea393.063368712a79916e.json"},{"attributes":{"category":"technical","domain":"AI Governance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-ai-25-21e48906.html","id":"uc:UC-AI-25","title":"UC-AI-25 — Guide code-generating systems toward secure patterns and safe dependencies","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-ai-25-21e48906.7502a3e289eeee6c.json"},{"attributes":{"category":"administrative","domain":"Asset Management & Inventory","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-asset-01-04dbd5db.html","id":"uc:UC-ASSET-01","title":"UC-ASSET-01 — Maintain a complete inventory of systems, hardware, and software","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-asset-01-04dbd5db.344933bd9bbaa9b8.json"},{"attributes":{"category":"administrative","domain":"Asset Management & Inventory","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-asset-02-6c6ac61b.html","id":"uc:UC-ASSET-02","title":"UC-ASSET-02 — Inventory data and document processing activities and flows","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-asset-02-6c6ac61b.44215c67a57ea5b7.json"},{"attributes":{"category":"administrative","domain":"Asset Management & Inventory","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-asset-03-3e6216cd.html","id":"uc:UC-ASSET-03","title":"UC-ASSET-03 — Classify, prioritize, and label information and assets","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-asset-03-3e6216cd.2de40b0c92a6341f.json"},{"attributes":{"category":"physical","domain":"Asset Management & Inventory","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-asset-04-347e095f.html","id":"uc:UC-ASSET-04","title":"UC-ASSET-04 — Control storage media through use, storage, and destruction","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-asset-04-347e095f.84ad7640474de7a8.json"},{"attributes":{"category":"administrative","domain":"Asset Management & Inventory","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-asset-05-11852f6d.html","id":"uc:UC-ASSET-05","title":"UC-ASSET-05 — Inventory supplier services and assess critical suppliers","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-asset-05-11852f6d.ab278dd5b39de800.json"},{"attributes":{"category":"administrative","domain":"Asset Management & Inventory","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-asset-06-d13d9c7f.html","id":"uc:UC-ASSET-06","title":"UC-ASSET-06 — Govern acceptable use of endpoints, off-site, and external systems","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-asset-06-d13d9c7f.63c862a94ded7db7.json"},{"attributes":{"category":"administrative","domain":"Asset Management & Inventory","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-asset-07-5039208b.html","id":"uc:UC-ASSET-07","title":"UC-ASSET-07 — Manage assets through their life cycle and recover them at exit","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-asset-07-5039208b.bdc169b3c8e41029.json"},{"attributes":{"category":"administrative","domain":"Asset Management & Inventory","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-asset-08-7413af1c.html","id":"uc:UC-ASSET-08","title":"UC-ASSET-08 — Transfer information securely under defined rules and agreements","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-asset-08-7413af1c.3ecabb34006fd58d.json"},{"attributes":{"category":"administrative","domain":"Vulnerability & Patch Management","type":"detective"},"htmlUrl":"/agents/records/uc-uc-asset-09-911f6a6c.html","id":"uc:UC-ASSET-09","title":"UC-ASSET-09 — Receive, analyze, and act on threat and vulnerability intelligence","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-asset-09-911f6a6c.d0eed1d48cc2c0b2.json"},{"attributes":{"category":"administrative","domain":"Risk Assessment & Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-asset-10-bbda2a79.html","id":"uc:UC-ASSET-10","title":"UC-ASSET-10 — Assess and track changes and exceptions for risk impact","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-asset-10-bbda2a79.ee57ba73b03ec663.json"},{"attributes":{"category":"administrative","domain":"Incident Management & Response","type":"corrective"},"htmlUrl":"/agents/records/uc-uc-asset-11-714d9672.html","id":"uc:UC-ASSET-11","title":"UC-ASSET-11 — Improve security plans and processes from operational lessons","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-asset-11-714d9672.55ca85eeee6d7d7a.json"},{"attributes":{"category":"technical","domain":"Business Continuity & Disaster Recovery","type":"detective"},"htmlUrl":"/agents/records/uc-uc-asset-12-32fbbd73.html","id":"uc:UC-ASSET-12","title":"UC-ASSET-12 — Operate scheduled processing, backup, and availability monitoring","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-asset-12-32fbbd73.3e4f8a731e718611.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-01-10668058.html","id":"uc:UC-AUDIT-01","title":"UC-AUDIT-01 — Maintain an independent internal audit function","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-audit-01-10668058.d30836a548499d86.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-02-0279f203.html","id":"uc:UC-AUDIT-02","title":"UC-AUDIT-02 — Establish a board-approved internal audit mandate and charter","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-audit-02-0279f203.7df686fed28cb446.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-03-927ae903.html","id":"uc:UC-AUDIT-03","title":"UC-AUDIT-03 — Ensure board oversight and support of internal audit","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-audit-03-927ae903.5b3c713d449bb6e2.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-04-c880e18f.html","id":"uc:UC-AUDIT-04","title":"UC-AUDIT-04 — Uphold integrity and ethical conduct in internal auditing","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-audit-04-c880e18f.984d0884e1ced398.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-05-3332a81f.html","id":"uc:UC-AUDIT-05","title":"UC-AUDIT-05 — Maintain auditor objectivity and disclose impairments","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-audit-05-3332a81f.e4fc41ae09b5609a.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-06-3a5916e0.html","id":"uc:UC-AUDIT-06","title":"UC-AUDIT-06 — Ensure auditor competency and continuing development","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-audit-06-3a5916e0.8c3b5ddbb2407e05.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-07-50f8c2fa.html","id":"uc:UC-AUDIT-07","title":"UC-AUDIT-07 — Exercise due professional care and professional skepticism","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-audit-07-50f8c2fa.0070f2809b823772.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-08-b0e8d44c.html","id":"uc:UC-AUDIT-08","title":"UC-AUDIT-08 — Protect confidential information obtained in audit work","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-audit-08-b0e8d44c.d9ddead925af1935.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-09-f23ecfe4.html","id":"uc:UC-AUDIT-09","title":"UC-AUDIT-09 — Develop a risk-based internal audit strategy and plan","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-audit-09-f23ecfe4.09a5bd89c616e870.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-10-fc9abe7f.html","id":"uc:UC-AUDIT-10","title":"UC-AUDIT-10 — Manage internal audit financial, human, and technology resources","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-audit-10-fc9abe7f.2ef03059a70e322e.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-11-80294fe7.html","id":"uc:UC-AUDIT-11","title":"UC-AUDIT-11 — Establish audit methodologies and engagement work programs","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-audit-11-80294fe7.0e2a7d8f4c4bde4d.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-12-657c1271.html","id":"uc:UC-AUDIT-12","title":"UC-AUDIT-12 — Plan engagements with risk-based objectives, scope, and criteria","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-audit-12-657c1271.2d422667f375b1b4.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/agents/records/uc-uc-audit-13-3dae730e.html","id":"uc:UC-AUDIT-13","title":"UC-AUDIT-13 — Gather and analyze evidence to develop engagement findings","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-audit-13-3dae730e.cd9d8f8bb3660cb5.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/agents/records/uc-uc-audit-14-5c0dbe8f.html","id":"uc:UC-AUDIT-14","title":"UC-AUDIT-14 — Evaluate findings and develop recommendations and action plans","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-audit-14-5c0dbe8f.dbe2ef21dc2ee7b2.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-15-18fe3d07.html","id":"uc:UC-AUDIT-15","title":"UC-AUDIT-15 — Document and supervise engagement work","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-audit-15-18fe3d07.f512082dca56d76a.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/agents/records/uc-uc-audit-16-03aa1161.html","id":"uc:UC-AUDIT-16","title":"UC-AUDIT-16 — Communicate final engagement results to stakeholders","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-audit-16-03aa1161.f6f608e83174c31d.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/agents/records/uc-uc-audit-17-94dc7e0c.html","id":"uc:UC-AUDIT-17","title":"UC-AUDIT-17 — Follow up on findings and escalate risk acceptance","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-audit-17-94dc7e0c.5551f17d56b04885.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-18-7ab55995.html","id":"uc:UC-AUDIT-18","title":"UC-AUDIT-18 — Communicate with stakeholders on assurance matters","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-audit-18-7ab55995.c47def3e4d64c5e8.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/agents/records/uc-uc-audit-19-a0f61a19.html","id":"uc:UC-AUDIT-19","title":"UC-AUDIT-19 — Operate an audit quality assurance and improvement program","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-audit-19-a0f61a19.bb0b1722bb2cd7b8.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/agents/records/uc-uc-audit-20-6032484b.html","id":"uc:UC-AUDIT-20","title":"UC-AUDIT-20 — Obtain external quality assessments of internal audit","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-audit-20-6032484b.a5ad69aaeb027138.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/agents/records/uc-uc-audit-21-6406caa4.html","id":"uc:UC-AUDIT-21","title":"UC-AUDIT-21 — Assess control effectiveness through testing and monitoring","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-audit-21-6406caa4.ee3571f3cb55f981.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/agents/records/uc-uc-audit-22-2a70149b.html","id":"uc:UC-AUDIT-22","title":"UC-AUDIT-22 — Review risk strategy and performance with leadership","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-audit-22-2a70149b.76665f5d150e20f7.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/agents/records/uc-uc-audit-23-124d94d5.html","id":"uc:UC-AUDIT-23","title":"UC-AUDIT-23 — Coordinate independent assurance reviews across providers","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-audit-23-124d94d5.86ab7963af36b87c.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"detective"},"htmlUrl":"/agents/records/uc-uc-audit-24-fa96fe18.html","id":"uc:UC-AUDIT-24","title":"UC-AUDIT-24 — Manage compliance with external legal and regulatory requirements","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-audit-24-fa96fe18.e0c990a41bb5a0a8.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-25-e23c8618.html","id":"uc:UC-AUDIT-25","title":"UC-AUDIT-25 — Maintain quality records and information for internal control","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-audit-25-e23c8618.6e16b5f87174886b.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-26-3a91d068.html","id":"uc:UC-AUDIT-26","title":"UC-AUDIT-26 — Authorize systems and internal connections before operation","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-audit-26-3a91d068.38a20e4468abfba8.json"},{"attributes":{"category":"administrative","domain":"Compliance, Audit & Assurance","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-audit-27-b7e48974.html","id":"uc:UC-AUDIT-27","title":"UC-AUDIT-27 — Govern expanded internal audit ERM responsibilities","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-audit-27-b7e48974.8c9a8f909bba0cfe.json"},{"attributes":{"category":"administrative","domain":"Business Continuity & Disaster Recovery","type":"corrective"},"htmlUrl":"/agents/records/uc-uc-bcdr-01-428f23d3.html","id":"uc:UC-BCDR-01","title":"UC-BCDR-01 — Maintain business continuity and disaster recovery plans","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-bcdr-01-428f23d3.8b543407311f1b9c.json"},{"attributes":{"category":"administrative","domain":"Business Continuity & Disaster Recovery","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-bcdr-02-2a51c24c.html","id":"uc:UC-BCDR-02","title":"UC-BCDR-02 — Establish and govern an ICT operational resilience framework","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-bcdr-02-2a51c24c.c00e6953a5f03658.json"},{"attributes":{"category":"technical","domain":"Business Continuity & Disaster Recovery","type":"corrective"},"htmlUrl":"/agents/records/uc-uc-bcdr-03-d30f4ccf.html","id":"uc:UC-BCDR-03","title":"UC-BCDR-03 — Back up data and verify restorability","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-bcdr-03-d30f4ccf.50c40dd3abe7d0f8.json"},{"attributes":{"category":"technical","domain":"Business Continuity & Disaster Recovery","type":"corrective"},"htmlUrl":"/agents/records/uc-uc-bcdr-04-5d004f42.html","id":"uc:UC-BCDR-04","title":"UC-BCDR-04 — Provide redundant and alternate processing, storage, and telecom","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-bcdr-04-5d004f42.16d85b78856c6183.json"},{"attributes":{"category":"technical","domain":"Business Continuity & Disaster Recovery","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-bcdr-05-f73361f2.html","id":"uc:UC-BCDR-05","title":"UC-BCDR-05 — Manage capacity to meet availability requirements","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-bcdr-05-f73361f2.0e32a9b62ce63ae3.json"},{"attributes":{"category":"administrative","domain":"Business Continuity & Disaster Recovery","type":"corrective"},"htmlUrl":"/agents/records/uc-uc-bcdr-06-c505e5bd.html","id":"uc:UC-BCDR-06","title":"UC-BCDR-06 — Resolve operational incidents and eliminate root causes","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-bcdr-06-c505e5bd.a5627cfba561b58f.json"},{"attributes":{"category":"technical","domain":"Business Continuity & Disaster Recovery","type":"corrective"},"htmlUrl":"/agents/records/uc-uc-bcdr-07-e5d74596.html","id":"uc:UC-BCDR-07","title":"UC-BCDR-07 — Execute recovery plans to restore systems and operations","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-bcdr-07-e5d74596.aaeaa9278c7899b9.json"},{"attributes":{"category":"administrative","domain":"Business Continuity & Disaster Recovery","type":"corrective"},"htmlUrl":"/agents/records/uc-uc-bcdr-08-6e625399.html","id":"uc:UC-BCDR-08","title":"UC-BCDR-08 — Declare recovery complete and set post-incident norms","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-bcdr-08-6e625399.810a0ed6983ea2f2.json"},{"attributes":{"category":"administrative","domain":"Business Continuity & Disaster Recovery","type":"corrective"},"htmlUrl":"/agents/records/uc-uc-bcdr-09-c9025680.html","id":"uc:UC-BCDR-09","title":"UC-BCDR-09 — Communicate recovery status to stakeholders","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-bcdr-09-c9025680.407a719d4bf152bb.json"},{"attributes":{"category":"administrative","domain":"Business Continuity & Disaster Recovery","type":"detective"},"htmlUrl":"/agents/records/uc-uc-bcdr-10-602160e4.html","id":"uc:UC-BCDR-10","title":"UC-BCDR-10 — Test recovery capabilities and train contingency personnel","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-bcdr-10-602160e4.237603e7ad34e1b1.json"},{"attributes":{"category":"technical","domain":"Business Continuity & Disaster Recovery","type":"corrective"},"htmlUrl":"/agents/records/uc-uc-bcdr-11-c3dddae2.html","id":"uc:UC-BCDR-11","title":"UC-BCDR-11 — Sustain operations via safe modes and alternate mechanisms","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-bcdr-11-c3dddae2.a2e0bcc1c86aede6.json"},{"attributes":{"category":"administrative","domain":"Business Continuity & Disaster Recovery","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-bcdr-12-0d9cc358.html","id":"uc:UC-BCDR-12","title":"UC-BCDR-12 — Operate IT services according to defined procedures","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-bcdr-12-0d9cc358.97a55d841a5dddfa.json"},{"attributes":{"category":"technical","domain":"Logging, Monitoring & Detection","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-bcdr-13-aa7feb8e.html","id":"uc:UC-BCDR-13","title":"UC-BCDR-13 — Operate continuous security protection services","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-bcdr-13-aa7feb8e.07f14fe49f47e947.json"},{"attributes":{"category":"administrative","domain":"Financial Reporting Controls (SOX)","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-bcdr-14-997de451.html","id":"uc:UC-BCDR-14","title":"UC-BCDR-14 — Embed control activities in business processes","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-bcdr-14-997de451.520a985a85106232.json"},{"attributes":{"category":"administrative","domain":"Vulnerability & Patch Management","type":"preventive"},"htmlUrl":"/agents/records/uc-uc-bcdr-16-462251f1.html","id":"uc:UC-BCDR-16","title":"UC-BCDR-16 — Participate in cyber threat intelligence sharing","type":"unified","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-uc-uc-bcdr-16-462251f1.e407cc1a938ce6e0.json"}],"schemaVersion":1,"total":289}