{"catalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","download":{"releaseId":"sha256:3b7088463835dd33b00247946537b4531861e92e3916784c3e656c4c26629eea","slug":"grc-domain-oversight-management-review","url":"/assets/agent_workflow-grc-domain-oversight-management-review-b6621bc9.2b4aa99b549c79fc.json"},"kind":"record","record":{"attributes":{"department":"risk-management","domain":"grc","lineOfDefense":"monitor"},"canonicalUrl":"https://evidenceflows.com/workflows/all/?w=grc-domain-oversight-management-review","description":"Quarterly management review of one process area - the process area's own oversight run. The domain owner reviews the registers the domain operates (systems, tenants, audits), the health and evidence of the operating-process runs, the domain's risks, issues and metrics, and the operation of its controls, then records direction and a dual sign-off. Instantiated once per process area; the operating processes keep their own runs.","details":{"canonicalUrl":"https://evidenceflows.com/workflows/all/?w=grc-domain-oversight-management-review","capabilities":[],"controls":["UC-RISK-13","UC-RISK-14","UC-GOV-21"],"domains":["grc"],"lineOfDefense":"monitor","mappingStatus":"mapped","releaseId":"sha256:3b7088463835dd33b00247946537b4531861e92e3916784c3e656c4c26629eea","roleIntegrity":{"activityCount":0,"ermPhases":[],"lineRoles":[],"serviceModes":[],"warnings":[]},"sourceTemplateId":"workflow-library:grc-domain-oversight-management-review","standards":["coso-erm","iso-31000","nist-800-53","soc2"],"teams":["risk-management","executive"]},"download":{"releaseId":"sha256:3b7088463835dd33b00247946537b4531861e92e3916784c3e656c4c26629eea"},"history":{"digest":"6e0a6646f9ac0afcb8b787f9d5c879042ec840f71ba81a3db98a0951bbf40f56","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-10-04T21:48:26Z","updatedRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4"},"id":"wf:D50","mapUrl":"https://evidenceflows.com/?v=1&node=wf%3AD50","slug":"grc-domain-oversight-management-review","sourceIds":["cobit-2019","coso-erm","coso-ic","iso-31000","nist-800-53","soc2"],"sourceUrl":null,"title":"Domain Oversight and Management Review","type":"workflow"},"relationships":[{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:89f547ea97977374f64e1f08599c44a7e5d439db08ccd0338ee6000261c6df44","properties":{},"sourceDetailPath":"/data/v1/records/wf-d50-366fc8d4.json","sourceId":"wf:D50","targetDetailPath":"/data/v1/records/uc-uc-risk-13-75b9f6c7.json","targetId":"uc:UC-RISK-13","type":"oversees"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:d37a295edb960f587e4d5a2ada322a7e4127b25b1b72e16ed76a1e92c8daf600","properties":{},"sourceDetailPath":"/data/v1/records/wf-d50-366fc8d4.json","sourceId":"wf:D50","targetDetailPath":"/data/v1/records/uc-uc-gov-21-8c5d79f9.json","targetId":"uc:UC-GOV-21","type":"oversees"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:edc3441e4c32dfc5ee17a83a42a00c71aeadc97d81ecea10754da56cce6fa1a6","properties":{},"sourceDetailPath":"/data/v1/records/wf-d50-366fc8d4.json","sourceId":"wf:D50","targetDetailPath":"/data/v1/records/uc-uc-risk-14-a5d6281b.json","targetId":"uc:UC-RISK-14","type":"oversees"}],"schemaVersion":1}