{"catalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","download":{"releaseId":"sha256:038cb7c0b21ca22b0f35110ec6014ec4996dbf593bf829ef1f88c5c72ca15bff","slug":"grc-system-third-party-risk-review","url":"/assets/agent_workflow-grc-system-third-party-risk-review-3e6a28b9.fbe94d38a2883b49.json"},"kind":"record","record":{"attributes":{"department":"risk-management","domain":"grc","lineOfDefense":"monitor"},"canonicalUrl":"https://evidenceflows.com/workflows/all/?w=grc-system-third-party-risk-review","description":"Runs on the existing system item. Review system and provider dependencies, assess current risk and control evidence, select response actions, and approve the review record. Deliver the reviewed result and open actions to the responsible register owner and the named companion procedure.","details":{"canonicalUrl":"https://evidenceflows.com/workflows/all/?w=grc-system-third-party-risk-review","capabilities":["system-third-party-risk-review"],"controls":["UC-RISK-18","UC-CONFIG-10","UC-TPRM-02","UC-TPRM-04","UC-TPRM-08"],"domains":["grc"],"lineOfDefense":"monitor","mappingStatus":"mapped","releaseId":"sha256:038cb7c0b21ca22b0f35110ec6014ec4996dbf593bf829ef1f88c5c72ca15bff","roleIntegrity":{"activityCount":0,"ermPhases":[],"lineRoles":[],"serviceModes":[],"warnings":[]},"sourceTemplateId":"workflow-library:grc-system-third-party-risk-review","standards":["iso-27001","nist-800-53","soc2"],"teams":["risk-management","it","procurement"]},"download":{"releaseId":"sha256:038cb7c0b21ca22b0f35110ec6014ec4996dbf593bf829ef1f88c5c72ca15bff"},"history":{"digest":"de1664dd95114d046074d3146827f782457c94d2200130f6f11c21178ab671a3","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-10-04T21:48:26Z","updatedRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4"},"id":"wf:D55","mapUrl":"https://evidenceflows.com/?v=1&node=wf%3AD55","slug":"grc-system-third-party-risk-review","sourceIds":["aiuc-1","iso-27001","nist-800-53","nist-csf-2","soc2"],"sourceUrl":null,"title":"System and Third-Party Risk Review","type":"workflow"},"relationships":[{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:43d7e062ec9a2b5e6cde1456bd143ba1ee5580574be59a579604864e20cafc85","properties":{},"sourceDetailPath":"/data/v1/records/wf-d55-248b03a5.json","sourceId":"wf:D55","targetDetailPath":"/data/v1/records/uc-uc-tprm-02-c35b26eb.json","targetId":"uc:UC-TPRM-02","type":"operates"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:656ac62569a0bb48ad16dfeedf7baf6154882714af6ad0539f9a6cdb2613fc40","properties":{},"sourceDetailPath":"/data/v1/records/wf-d55-248b03a5.json","sourceId":"wf:D55","targetDetailPath":"/data/v1/records/uc-uc-tprm-04-e6aef252.json","targetId":"uc:UC-TPRM-04","type":"operates"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:7343a8f2d902c6be8f8b8a101f0ecbe48bc9218fb14d40824311bf617cf79997","properties":{},"sourceDetailPath":"/data/v1/records/wf-d55-248b03a5.json","sourceId":"wf:D55","targetDetailPath":"/data/v1/records/uc-uc-tprm-08-6de49908.json","targetId":"uc:UC-TPRM-08","type":"operates"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:ab32e2107522b3034bdf9db923f37f6e55d8bc6453012ec5d5f642b6d9561cf2","properties":{},"sourceDetailPath":"/data/v1/records/wf-d55-248b03a5.json","sourceId":"wf:D55","targetDetailPath":"/data/v1/records/uc-uc-risk-18-23752e70.json","targetId":"uc:UC-RISK-18","type":"operates"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:dea7699380c1dafca18784059ac4d3587cbcf7b1a11953320aea6345e2334f98","properties":{},"sourceDetailPath":"/data/v1/records/wf-d55-248b03a5.json","sourceId":"wf:D55","targetDetailPath":"/data/v1/records/uc-uc-config-10-921518b8.json","targetId":"uc:UC-CONFIG-10","type":"operates"}],"schemaVersion":1}