{"catalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","download":{"releaseId":"sha256:2fd3fd603ca76ca6739976efc56430ea427c35cb84627724863b0669c5924291","slug":"reg-legal-regulatory-compliance-register-evaluation","url":"/assets/agent_workflow-reg-legal-regulatory-compliance-register-evaluation-592eb844.95eb6e6314bc4640.json"},"kind":"record","record":{"attributes":{"department":"compliance-legal","domain":"reg","lineOfDefense":"operate"},"canonicalUrl":"https://evidenceflows.com/workflows/all/?w=reg-legal-regulatory-compliance-register-evaluation","description":"Runs the compliance office's recurring register-evaluation cycle as a compliance-review engagement: the workflow instance attaches to an Audit item created per cycle (audit_type: compliance, period_start/period_end bounding the evaluation period, lead_auditor = the compliance officer), and every gap, management directive, and result produced this cycle links back to that Audit. A decision-aware cycle that refreshes the register of applicable legal, regulatory, and contractual requirements — including intellectual-property and software-licensing obligations — confirms ownership, schedules and performs documented compliance evaluations on each requirement's defined cadence, remediates non-compliance, reports status to management, and retains the register and results as evidence. Consumes upstream: between-cycle regulatory change flows in as a data feed from the Regulatory Horizon Scanning & Triage workflow, swept at the register-refresh entry point (a feed, not a formal handoff package). Named deliverables: the dated register of record, the period evaluation schedule, the evaluation results register, the compliance determination, the exposure-ranked remediation set (Issues linked to the cycle Audit), the compliance status report and dashboard, and the retained cycle evidence set. Hands off downstream: obligations that need standing up route to the Regulatory Obligation Implementation workflow — named in prose at close-and-archive, with no handoff package produced here. In scope: the legal, regulatory, and contractual requirements already in the compliance register that fall due for evaluation this period — cadence-due, overdue, or event-triggered. Out of scope: standing up brand-new obligations. The cycle scope — register population, the due subset including overdue catch-ups, and the period boundaries — is set at the register-refresh entry point.","details":{"canonicalUrl":"https://evidenceflows.com/workflows/all/?w=reg-legal-regulatory-compliance-register-evaluation","capabilities":[],"controls":["UC-AUDIT-24"],"domains":["reg"],"lineOfDefense":"operate","mappingStatus":"mapped","releaseId":"sha256:2fd3fd603ca76ca6739976efc56430ea427c35cb84627724863b0669c5924291","roleIntegrity":{"activityCount":0,"ermPhases":[],"lineRoles":[],"serviceModes":[],"warnings":[]},"sourceTemplateId":"workflow-library:reg-legal-regulatory-compliance-register-evaluation","standards":["cobit-2019","iso-27001"],"teams":["compliance-legal"]},"download":{"releaseId":"sha256:2fd3fd603ca76ca6739976efc56430ea427c35cb84627724863b0669c5924291"},"history":{"digest":"44dccf80b87168570f0b326487ddd95d3da289d25bc84ae4f7cbc3428dcf46f5","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-10-04T21:48:26Z","updatedRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4"},"id":"wf:R12","mapUrl":"https://evidenceflows.com/?v=1&node=wf%3AR12","slug":"reg-legal-regulatory-compliance-register-evaluation","sourceIds":["cobit-2019","iso-27001"],"sourceUrl":null,"title":"Legal & Regulatory Compliance Register Evaluation","type":"workflow"},"relationships":[{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:9e28b66a7684366e1c248bd4903cd2b5019e949e0e054ccb938deb48999e50c1","properties":{},"sourceDetailPath":"/data/v1/records/wf-r12-f55631e7.json","sourceId":"wf:R12","targetDetailPath":"/data/v1/records/uc-uc-audit-24-fa96fe18.json","targetId":"uc:UC-AUDIT-24","type":"operates"}],"schemaVersion":1}