{"catalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","download":{"releaseId":"sha256:2eb07fc4bfc2c524ac3ae34c6e08fa17bee31e099afa210f9cca502f9476bbc7","slug":"itgc-change-provisioning-testing","url":"/assets/agent_workflow-itgc-change-provisioning-testing-a64b8ccd.dd377f03c94fc2fa.json"},"kind":"record","record":{"attributes":{"department":"internal-audit","domain":"audit","lineOfDefense":"assure"},"canonicalUrl":"https://evidenceflows.com/workflows/all/?w=itgc-change-provisioning-testing","description":"Runs ON a control item (a change-management or access-provisioning ITGC). Validates the change and provisioning populations for the period, draws reproducible samples, reconciles independent deployment and ticket populations in both directions, tests sampled tickets and deployments against the control attributes (approval before migration, segregation of developer and migrator, approval before access, access matches the requested profile), records design and operating conclusions on the control, and raises every exception as an issue.","details":{"canonicalUrl":"https://evidenceflows.com/workflows/all/?w=itgc-change-provisioning-testing","capabilities":["audit-testing"],"controls":["UC-ACCESS-01","UC-ACCESS-03","UC-ACCESS-16"],"domains":["audit"],"lineOfDefense":"assure","mappingStatus":"mapped","releaseId":"sha256:2eb07fc4bfc2c524ac3ae34c6e08fa17bee31e099afa210f9cca502f9476bbc7","roleIntegrity":{"activityCount":0,"ermPhases":[],"lineRoles":[],"serviceModes":[],"warnings":[]},"sourceTemplateId":"workflow-library:itgc-change-provisioning-testing","standards":["iia-2024","cobit-2019","sox"],"teams":["internal-audit"]},"download":{"releaseId":"sha256:2eb07fc4bfc2c524ac3ae34c6e08fa17bee31e099afa210f9cca502f9476bbc7"},"history":{"digest":"43f7512eefeff25691ed9c222812ed2bc671a5d175ebb3258a6a74a54369e64f","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-10-04T21:48:26Z","updatedRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4"},"id":"wf:A18","mapUrl":"https://evidenceflows.com/?v=1&node=wf%3AA18","slug":"itgc-change-provisioning-testing","sourceIds":["aiuc-1","iso-27001","nist-800-53","nist-ai-agent-identity","nist-csf-2","pci-dss","soc1","soc2","sox"],"sourceUrl":null,"title":"ITGC Change & Provisioning Testing","type":"workflow"},"relationships":[{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:4a213726cca3a4e6677d9d25c6e53b232e846c4d877f2aa9b4760bce6289e947","properties":{},"sourceDetailPath":"/data/v1/records/wf-a18-be3cee23.json","sourceId":"wf:A18","targetDetailPath":"/data/v1/records/uc-uc-access-03-43eeb212.json","targetId":"uc:UC-ACCESS-03","type":"tests"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:86db0c9873322d1205c689f0601c544cb2490815b2f5777d952cdc027a7dcd5c","properties":{},"sourceDetailPath":"/data/v1/records/wf-a18-be3cee23.json","sourceId":"wf:A18","targetDetailPath":"/data/v1/records/uc-uc-access-01-1e70b922.json","targetId":"uc:UC-ACCESS-01","type":"tests"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:a32c1438848292071633ba6932b26ecd566dfc1598b5a5ed0957c7a2dcbd2499","properties":{},"sourceDetailPath":"/data/v1/records/wf-a18-be3cee23.json","sourceId":"wf:A18","targetDetailPath":"/data/v1/records/uc-uc-access-16-7a8d6d65.json","targetId":"uc:UC-ACCESS-16","type":"tests"}],"schemaVersion":1}