{"catalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","contextIds":[],"directIds":["ctrl:cobit-2019:APO01","ctrl:cobit-2019:APO02","ctrl:cobit-2019:APO03","ctrl:cobit-2019:APO04","ctrl:cobit-2019:APO05","ctrl:cobit-2019:APO06","ctrl:cobit-2019:APO07","ctrl:cobit-2019:APO08","ctrl:cobit-2019:APO09","ctrl:cobit-2019:APO10","ctrl:cobit-2019:APO11","ctrl:cobit-2019:APO12","ctrl:cobit-2019:APO13","ctrl:cobit-2019:APO14","ctrl:cobit-2019:BAI01","ctrl:cobit-2019:BAI02","ctrl:cobit-2019:BAI03","ctrl:cobit-2019:BAI04","ctrl:cobit-2019:BAI05","ctrl:cobit-2019:BAI06","ctrl:cobit-2019:BAI07","ctrl:cobit-2019:BAI08","ctrl:cobit-2019:BAI09","ctrl:cobit-2019:BAI10","ctrl:cobit-2019:BAI11","ctrl:cobit-2019:DSS01","ctrl:cobit-2019:DSS02","ctrl:cobit-2019:DSS03","ctrl:cobit-2019:DSS04","ctrl:cobit-2019:DSS05","ctrl:cobit-2019:DSS06","ctrl:cobit-2019:EDM01","ctrl:cobit-2019:EDM02","ctrl:cobit-2019:EDM03","ctrl:cobit-2019:EDM04","ctrl:cobit-2019:EDM05","ctrl:cobit-2019:MEA01","ctrl:cobit-2019:MEA02","ctrl:cobit-2019:MEA03","ctrl:cobit-2019:MEA04"],"kind":"bundle","metadata":"/assets/agent_metadata.84eaa456936e4fa1.json","name":"COBIT 2019","next":"/assets/agent_sources-cobit-2019-2.ea7b27bd28c0849e.json","page":1,"pageSize":40,"records":[{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed I&T Management Framework","details":{"automation":"manual","control_category":"administrative","control_id":"APO01","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Human Resources / Personnel Security","Third-Party / Supply-Chain Risk","Asset Management & Inventory"],"framework":"cobit-2019","group":"Align, Plan and Organize","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"13e31403624625272ea17ef51f5f2b140422bdc99f5c717f0a3cba6cf1ad91fb","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-apo01-d6a49088.html","id":"ctrl:cobit-2019:APO01","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3AAPO01","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"APO01 — Managed I&T Management Framework","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-apo01-d6a49088.19eb739670cbeefa.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Strategy","details":{"automation":"manual","control_category":"administrative","control_id":"APO02","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Human Resources / Personnel Security","Third-Party / Supply-Chain Risk","Asset Management & Inventory"],"framework":"cobit-2019","group":"Align, Plan and Organize","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"e52e9310cffa276415fe7f0678d4efe3cba5c4b5015de998cc963e5a444d0221","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-apo02-52b0bcbe.html","id":"ctrl:cobit-2019:APO02","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3AAPO02","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"APO02 — Managed Strategy","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-apo02-52b0bcbe.fb15d13ded037621.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Enterprise Architecture","details":{"automation":"manual","control_category":"administrative","control_id":"APO03","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Human Resources / Personnel Security","Third-Party / Supply-Chain Risk","Asset Management & Inventory"],"framework":"cobit-2019","group":"Align, Plan and Organize","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":1,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"054574edb9ee8d75aaa53536a21b47527377c9ac3f77075cd50c888e7e37a3d7","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-apo03-5d678454.html","id":"ctrl:cobit-2019:APO03","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3AAPO03","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"APO03 — Managed Enterprise Architecture","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-apo03-5d678454.1a9e5efdcae6c109.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Innovation","details":{"automation":"manual","control_category":"administrative","control_id":"APO04","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Human Resources / Personnel Security","Third-Party / Supply-Chain Risk","Asset Management & Inventory"],"framework":"cobit-2019","group":"Align, Plan and Organize","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"aa07a195d1a6d565ccbf86ded8d420cc57c16058b1c5481cf3e46c5d5ad1d258","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-apo04-e419c159.html","id":"ctrl:cobit-2019:APO04","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3AAPO04","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"APO04 — Managed Innovation","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-apo04-e419c159.1351de70eb570957.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Portfolio","details":{"automation":"manual","control_category":"administrative","control_id":"APO05","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Human Resources / Personnel Security","Third-Party / Supply-Chain Risk","Asset Management & Inventory"],"framework":"cobit-2019","group":"Align, Plan and Organize","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"e6ba38e8ae0ef518b0b97a5f05979b77aa19baaae89a23c683223e05f3063d8c","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-apo05-ea9d3f42.html","id":"ctrl:cobit-2019:APO05","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3AAPO05","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"APO05 — Managed Portfolio","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-apo05-ea9d3f42.9ab6e25afb1489c2.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Budget and Costs","details":{"automation":"manual","control_category":"administrative","control_id":"APO06","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Human Resources / Personnel Security","Third-Party / Supply-Chain Risk","Asset Management & Inventory"],"framework":"cobit-2019","group":"Align, Plan and Organize","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"c990f75d683033f065909262703d517ad5517e0e71f77c69c0cc586d7d4d3a4c","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-apo06-2191e824.html","id":"ctrl:cobit-2019:APO06","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3AAPO06","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"APO06 — Managed Budget and Costs","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-apo06-2191e824.0b1d19d5406b964b.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Human Resources","details":{"automation":"manual","control_category":"administrative","control_id":"APO07","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Human Resources / Personnel Security","Third-Party / Supply-Chain Risk","Asset Management & Inventory"],"framework":"cobit-2019","group":"Align, Plan and Organize","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"fbcdfb1cf64e21d90e3f722c5d5598125c9ed8a0811e1d0402b446218d3ade53","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-apo07-20c9bdf0.html","id":"ctrl:cobit-2019:APO07","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3AAPO07","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"APO07 — Managed Human Resources","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-apo07-20c9bdf0.c3dd5df9f8385364.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Relationships","details":{"automation":"manual","control_category":"administrative","control_id":"APO08","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Human Resources / Personnel Security","Third-Party / Supply-Chain Risk","Asset Management & Inventory"],"framework":"cobit-2019","group":"Align, Plan and Organize","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"c70fa2a74570c67ee1242d37cb2f8ed1ab217baa41b65a3df7a1ff9fedd24663","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-apo08-6c76314b.html","id":"ctrl:cobit-2019:APO08","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3AAPO08","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"APO08 — Managed Relationships","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-apo08-6c76314b.b3b429ef9adce266.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Service Agreements","details":{"automation":"manual","control_category":"administrative","control_id":"APO09","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Human Resources / Personnel Security","Third-Party / Supply-Chain Risk","Asset Management & Inventory"],"framework":"cobit-2019","group":"Align, Plan and Organize","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":8,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"bb43b16f9afcd7bd186d775f6f5926edcf7214cc40d6a61be12f1996a2714c77","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-apo09-2d1f48e2.html","id":"ctrl:cobit-2019:APO09","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3AAPO09","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"APO09 — Managed Service Agreements","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-apo09-2d1f48e2.9f76be42d5d70ae1.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Vendors","details":{"automation":"manual","control_category":"administrative","control_id":"APO10","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Human Resources / Personnel Security","Third-Party / Supply-Chain Risk","Asset Management & Inventory"],"framework":"cobit-2019","group":"Align, Plan and Organize","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":8,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"ad5246dcb47abe65dc20ea1333131276d8c86508cbfc835e63337bbad6bf7561","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-apo10-2c3cb0dc.html","id":"ctrl:cobit-2019:APO10","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3AAPO10","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"APO10 — Managed Vendors","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-apo10-2c3cb0dc.f76307aee511a538.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Quality","details":{"automation":"manual","control_category":"administrative","control_id":"APO11","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Human Resources / Personnel Security","Third-Party / Supply-Chain Risk","Asset Management & Inventory"],"framework":"cobit-2019","group":"Align, Plan and Organize","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"0f362033bbfc3f860a127fa10c9efbbd5c87dfa9f1500c089102d5a680fd8337","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-apo11-92538e06.html","id":"ctrl:cobit-2019:APO11","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3AAPO11","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"APO11 — Managed Quality","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-apo11-92538e06.165e62c552d956b5.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Risk","details":{"automation":"manual","control_category":"administrative","control_id":"APO12","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Human Resources / Personnel Security","Third-Party / Supply-Chain Risk","Asset Management & Inventory"],"framework":"cobit-2019","group":"Align, Plan and Organize","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"3f4eff417a8aeaa2b1711eba36e22bf16e9c9b6e9f2b34a56255c64f7c835cd3","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-apo12-9086e034.html","id":"ctrl:cobit-2019:APO12","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3AAPO12","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"APO12 — Managed Risk","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-apo12-9086e034.d9341dc64f9b6417.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Security","details":{"automation":"manual","control_category":"administrative","control_id":"APO13","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Human Resources / Personnel Security","Third-Party / Supply-Chain Risk","Asset Management & Inventory"],"framework":"cobit-2019","group":"Align, Plan and Organize","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"6020c4af1ef2a4a712a0a32822dacd96bc942c7d9d7cbda9bded820de66480c7","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-apo13-b83b9404.html","id":"ctrl:cobit-2019:APO13","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3AAPO13","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"APO13 — Managed Security","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-apo13-b83b9404.f1af13bedf83460e.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Data","details":{"automation":"manual","control_category":"administrative","control_id":"APO14","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Human Resources / Personnel Security","Third-Party / Supply-Chain Risk","Asset Management & Inventory"],"framework":"cobit-2019","group":"Align, Plan and Organize","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"9c70b0bbca3cafeae911c66aeb484261407292acc121e4ee51335bf97de7a11c","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-apo14-ab650d02.html","id":"ctrl:cobit-2019:APO14","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3AAPO14","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"APO14 — Managed Data","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-apo14-ab650d02.da44de93744596fd.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Programs","details":{"automation":"manual","control_category":"administrative","control_id":"BAI01","control_type":"preventive","domains":["Secure Development (SDLC) & Application Security","Secure Configuration & Change Management","Asset Management & Inventory","Business Continuity & Disaster Recovery"],"framework":"cobit-2019","group":"Build, Acquire and Implement","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"0360ad36aa123372f8959717ab5c3b412ab50a30180639822b7bd2ccac3a1c14","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-bai01-12e2e132.html","id":"ctrl:cobit-2019:BAI01","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3ABAI01","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"BAI01 — Managed Programs","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-bai01-12e2e132.ac6d0b6af7d362db.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Requirements Definition","details":{"automation":"manual","control_category":"administrative","control_id":"BAI02","control_type":"preventive","domains":["Secure Development (SDLC) & Application Security","Secure Configuration & Change Management","Asset Management & Inventory","Business Continuity & Disaster Recovery"],"framework":"cobit-2019","group":"Build, Acquire and Implement","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"19fb1f27af5974fb0b1792ca1da1d947e1e6c78604c5ee7ab36980771ff90814","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-bai02-80041b74.html","id":"ctrl:cobit-2019:BAI02","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3ABAI02","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"BAI02 — Managed Requirements Definition","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-bai02-80041b74.c5ceb308f51616e1.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Solutions Identification and Build","details":{"automation":"manual","control_category":"administrative","control_id":"BAI03","control_type":"preventive","domains":["Secure Development (SDLC) & Application Security","Secure Configuration & Change Management","Asset Management & Inventory","Business Continuity & Disaster Recovery"],"framework":"cobit-2019","group":"Build, Acquire and Implement","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":8,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"25bb1ef247c72cf9b780b6c56878df66bc96410bf84c5b87bbebfa3f0fca3cde","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-bai03-bfe681b0.html","id":"ctrl:cobit-2019:BAI03","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3ABAI03","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"BAI03 — Managed Solutions Identification and Build","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-bai03-bfe681b0.19bb1d3a4af3c2ea.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Availability and Capacity","details":{"automation":"hybrid","control_category":"administrative","control_id":"BAI04","control_type":"preventive","domains":["Secure Development (SDLC) & Application Security","Secure Configuration & Change Management","Asset Management & Inventory","Business Continuity & Disaster Recovery"],"framework":"cobit-2019","group":"Build, Acquire and Implement","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":1,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"94f45873ee8942ffbc1340a7b897197adbe3600e731457596e693af5ef73c1ae","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-bai04-c6901e71.html","id":"ctrl:cobit-2019:BAI04","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3ABAI04","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"BAI04 — Managed Availability and Capacity","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-bai04-c6901e71.a3154774c43863a3.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Organizational Change","details":{"automation":"manual","control_category":"administrative","control_id":"BAI05","control_type":"preventive","domains":["Secure Development (SDLC) & Application Security","Secure Configuration & Change Management","Asset Management & Inventory","Business Continuity & Disaster Recovery"],"framework":"cobit-2019","group":"Build, Acquire and Implement","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":1,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"3a5a009872ece0858d1be61b01373228c4249efa9d9abceb5c13a9b9ae72b3a8","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-bai05-782c2ba0.html","id":"ctrl:cobit-2019:BAI05","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3ABAI05","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"BAI05 — Managed Organizational Change","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-bai05-782c2ba0.7927971a91d98c5a.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed IT Changes","details":{"automation":"hybrid","control_category":"administrative","control_id":"BAI06","control_type":"preventive","domains":["Secure Development (SDLC) & Application Security","Secure Configuration & Change Management","Asset Management & Inventory","Business Continuity & Disaster Recovery"],"framework":"cobit-2019","group":"Build, Acquire and Implement","key_control":true,"requirement_frequency":null,"requirement_status":null,"risk_count":6,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"84a6803131eb62f186c0b77e5f0e002df93ce8a0c45b28e7f53b75bba265dfb6","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-bai06-306e8a70.html","id":"ctrl:cobit-2019:BAI06","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3ABAI06","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"BAI06 — Managed IT Changes","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-bai06-306e8a70.86c082dfc838d0e9.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed IT Change Acceptance and Transitioning","details":{"automation":"manual","control_category":"administrative","control_id":"BAI07","control_type":"preventive","domains":["Secure Development (SDLC) & Application Security","Secure Configuration & Change Management","Asset Management & Inventory","Business Continuity & Disaster Recovery"],"framework":"cobit-2019","group":"Build, Acquire and Implement","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":6,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"115aa9e4049295f91a6b726d058d1dd121705d8868411fc891344934b7463a1f","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-bai07-dcabfa26.html","id":"ctrl:cobit-2019:BAI07","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3ABAI07","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"BAI07 — Managed IT Change Acceptance and Transitioning","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-bai07-dcabfa26.39f16072d1c0ed34.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Knowledge","details":{"automation":"manual","control_category":"administrative","control_id":"BAI08","control_type":"preventive","domains":["Secure Development (SDLC) & Application Security","Secure Configuration & Change Management","Asset Management & Inventory","Business Continuity & Disaster Recovery"],"framework":"cobit-2019","group":"Build, Acquire and Implement","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"6a36ad513cccb670dc853aeb3f6384db3197227b9907d1f58bc7b22c1ff76391","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-bai08-9f5f3d72.html","id":"ctrl:cobit-2019:BAI08","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3ABAI08","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"BAI08 — Managed Knowledge","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-bai08-9f5f3d72.d4e01db76277bdc0.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Assets","details":{"automation":"hybrid","control_category":"administrative","control_id":"BAI09","control_type":"preventive","domains":["Secure Development (SDLC) & Application Security","Secure Configuration & Change Management","Asset Management & Inventory","Business Continuity & Disaster Recovery"],"framework":"cobit-2019","group":"Build, Acquire and Implement","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"79ed1c399eb16afaa611190439319635a66f1ff4bab8b79105e36893865924e3","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-bai09-09a008c3.html","id":"ctrl:cobit-2019:BAI09","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3ABAI09","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"BAI09 — Managed Assets","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-bai09-09a008c3.f5e7aa4bd9511d01.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Configuration","details":{"automation":"hybrid","control_category":"administrative","control_id":"BAI10","control_type":"preventive","domains":["Secure Development (SDLC) & Application Security","Secure Configuration & Change Management","Asset Management & Inventory","Business Continuity & Disaster Recovery"],"framework":"cobit-2019","group":"Build, Acquire and Implement","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":7,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"269190e98da93b35ac350c5ec7e6e06daa3f0fd82a624fb74cd47b9b4dc0bc67","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-bai10-40479176.html","id":"ctrl:cobit-2019:BAI10","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3ABAI10","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"BAI10 — Managed Configuration","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-bai10-40479176.633397e758d0b397.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Projects","details":{"automation":"manual","control_category":"administrative","control_id":"BAI11","control_type":"preventive","domains":["Secure Development (SDLC) & Application Security","Secure Configuration & Change Management","Asset Management & Inventory","Business Continuity & Disaster Recovery"],"framework":"cobit-2019","group":"Build, Acquire and Implement","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"dbcc21b4e0d0d474a077f154f61a6b5427f324f2703d21baece11cf85bbc5fcd","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-bai11-fbe7d977.html","id":"ctrl:cobit-2019:BAI11","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3ABAI11","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"BAI11 — Managed Projects","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-bai11-fbe7d977.eb5129a2db35e6b5.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Operations","details":{"automation":"hybrid","control_category":"administrative","control_id":"DSS01","control_type":"preventive","domains":["Business Continuity & Disaster Recovery","Incident Management & Response","Logging, Monitoring & Detection","Governance, Policy & Oversight"],"framework":"cobit-2019","group":"Deliver, Service and Support","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"0f978eb5d67a4d8c696b754bc4efb7ea725e8ac0c5af9ea9dce58bfe6962f51c","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-dss01-d3ff2961.html","id":"ctrl:cobit-2019:DSS01","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3ADSS01","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"DSS01 — Managed Operations","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-dss01-d3ff2961.3f77ed9cdadedc9a.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"corrective"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Service Requests and Incidents","details":{"automation":"hybrid","control_category":"administrative","control_id":"DSS02","control_type":"corrective","domains":["Business Continuity & Disaster Recovery","Incident Management & Response","Logging, Monitoring & Detection","Governance, Policy & Oversight"],"framework":"cobit-2019","group":"Deliver, Service and Support","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"c3054225f389c70198634f35abc5bcb285cc678d294252b2560d75044c7532bc","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-dss02-af5bca5d.html","id":"ctrl:cobit-2019:DSS02","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3ADSS02","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"DSS02 — Managed Service Requests and Incidents","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-dss02-af5bca5d.d9218a4b31c470e5.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"corrective"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Problems","details":{"automation":"manual","control_category":"administrative","control_id":"DSS03","control_type":"corrective","domains":["Business Continuity & Disaster Recovery","Incident Management & Response","Logging, Monitoring & Detection","Governance, Policy & Oversight"],"framework":"cobit-2019","group":"Deliver, Service and Support","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"fa94651cd7f34385dcdc64403e2f31ff96cd2d85f63dea62616c5c909067406a","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-dss03-2540740f.html","id":"ctrl:cobit-2019:DSS03","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3ADSS03","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"DSS03 — Managed Problems","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-dss03-2540740f.3bd6a028b224e2af.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"corrective"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Continuity","details":{"automation":"hybrid","control_category":"administrative","control_id":"DSS04","control_type":"corrective","domains":["Business Continuity & Disaster Recovery","Incident Management & Response","Logging, Monitoring & Detection","Governance, Policy & Oversight"],"framework":"cobit-2019","group":"Deliver, Service and Support","key_control":true,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"1e25c6a05931dc002e5990161ca75aa81d6e282328eed0a1adb0ee939dcb1ba5","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-dss04-2d611bca.html","id":"ctrl:cobit-2019:DSS04","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3ADSS04","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"DSS04 — Managed Continuity","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-dss04-2d611bca.8070467762e011f7.json"},{"attributes":{"category":"technical","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Security Services","details":{"automation":"hybrid","control_category":"technical","control_id":"DSS05","control_type":"preventive","domains":["Business Continuity & Disaster Recovery","Incident Management & Response","Logging, Monitoring & Detection","Governance, Policy & Oversight"],"framework":"cobit-2019","group":"Deliver, Service and Support","key_control":true,"requirement_frequency":null,"requirement_status":null,"risk_count":5,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"bd7c76335ff833ec1c9f5de47cb36168b025e89829d163b3ae1efe539eccc45d","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-dss05-80cfe6d8.html","id":"ctrl:cobit-2019:DSS05","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3ADSS05","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"DSS05 — Managed Security Services","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-dss05-80cfe6d8.99e95f4288e74e9f.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Business Process Controls","details":{"automation":"hybrid","control_category":"administrative","control_id":"DSS06","control_type":"preventive","domains":["Business Continuity & Disaster Recovery","Incident Management & Response","Logging, Monitoring & Detection","Governance, Policy & Oversight"],"framework":"cobit-2019","group":"Deliver, Service and Support","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":7,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"e11d04c970aa19afe3d507a79ce6e8f6d01cf65f38e62700f21a49ae915fa433","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-dss06-c2b31b0e.html","id":"ctrl:cobit-2019:DSS06","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3ADSS06","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"DSS06 — Managed Business Process Controls","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-dss06-c2b31b0e.bddee764f99ee89e.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Ensured Governance Framework Setting and Maintenance","details":{"automation":"manual","control_category":"administrative","control_id":"EDM01","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Compliance, Audit & Assurance"],"framework":"cobit-2019","group":"Evaluate, Direct and Monitor","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"9cb83946a02fa03e2c87a35fb086c2771f073bd98f6e9921de4b3dccbe663048","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-edm01-95fe0a96.html","id":"ctrl:cobit-2019:EDM01","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3AEDM01","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"EDM01 — Ensured Governance Framework Setting and Maintenance","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-edm01-95fe0a96.73dfc575a0f65a54.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Ensured Benefits Delivery","details":{"automation":"manual","control_category":"administrative","control_id":"EDM02","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Compliance, Audit & Assurance"],"framework":"cobit-2019","group":"Evaluate, Direct and Monitor","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"f7767344622bbefff1c546ec90ed289f125d07654f43d65ce92e7c810633c331","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-edm02-4b1996ae.html","id":"ctrl:cobit-2019:EDM02","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3AEDM02","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"EDM02 — Ensured Benefits Delivery","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-edm02-4b1996ae.b6093f4f1c719ac7.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Ensured Risk Optimization","details":{"automation":"manual","control_category":"administrative","control_id":"EDM03","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Compliance, Audit & Assurance"],"framework":"cobit-2019","group":"Evaluate, Direct and Monitor","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"9e50d285cae803398a441af9b5d65f6811f65a03e53d2fc45a9d80a769227513","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-edm03-5708b8c4.html","id":"ctrl:cobit-2019:EDM03","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3AEDM03","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"EDM03 — Ensured Risk Optimization","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-edm03-5708b8c4.e128ff60f92bcc02.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Ensured Resource Optimization","details":{"automation":"manual","control_category":"administrative","control_id":"EDM04","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Compliance, Audit & Assurance"],"framework":"cobit-2019","group":"Evaluate, Direct and Monitor","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"12d610e5afee6948aa16c63b924a547362c101cf77cac1a639b84599f86ece20","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-edm04-7ad4bdc3.html","id":"ctrl:cobit-2019:EDM04","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3AEDM04","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"EDM04 — Ensured Resource Optimization","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-edm04-7ad4bdc3.17dea6b7d6f181cf.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"preventive"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Ensured Stakeholder Engagement","details":{"automation":"manual","control_category":"administrative","control_id":"EDM05","control_type":"preventive","domains":["Governance, Policy & Oversight","Risk Assessment & Management","Compliance, Audit & Assurance"],"framework":"cobit-2019","group":"Evaluate, Direct and Monitor","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"cb89e5b866b10fd1365a561fd861f18ee7589afc45cde2d2fba73523a8183111","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-edm05-c0483b9a.html","id":"ctrl:cobit-2019:EDM05","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3AEDM05","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"EDM05 — Ensured Stakeholder Engagement","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-edm05-c0483b9a.db4e6288e2bb8b13.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"detective"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Performance and Conformance Monitoring","details":{"automation":"hybrid","control_category":"administrative","control_id":"MEA01","control_type":"detective","domains":["Compliance, Audit & Assurance","Governance, Policy & Oversight","Risk Assessment & Management"],"framework":"cobit-2019","group":"Monitor, Evaluate and Assess","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"a3eb0634a55fa4ebc0d81e8a22e35130fab789c50cb12041fa90dcccf8516d66","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-mea01-d0c28364.html","id":"ctrl:cobit-2019:MEA01","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3AMEA01","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"MEA01 — Managed Performance and Conformance Monitoring","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-mea01-d0c28364.250827869485b8ec.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"detective"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed System of Internal Control","details":{"automation":"manual","control_category":"administrative","control_id":"MEA02","control_type":"detective","domains":["Compliance, Audit & Assurance","Governance, Policy & Oversight","Risk Assessment & Management"],"framework":"cobit-2019","group":"Monitor, Evaluate and Assess","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":3,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"4deeebfbe4c322e0b94bad978937f8dcf62b482d1846012ef44a441022b82940","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-mea02-4513eb15.html","id":"ctrl:cobit-2019:MEA02","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3AMEA02","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"MEA02 — Managed System of Internal Control","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-mea02-4513eb15.54fb88417ce9a189.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"detective"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Compliance With External Requirements","details":{"automation":"manual","control_category":"administrative","control_id":"MEA03","control_type":"detective","domains":["Compliance, Audit & Assurance","Governance, Policy & Oversight","Risk Assessment & Management"],"framework":"cobit-2019","group":"Monitor, Evaluate and Assess","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":6,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"ba314ae487ff8e54b4d34e58f67236cf2d9f6dfca035dfe19829eec4a411e02a","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-mea03-99c7dcca.html","id":"ctrl:cobit-2019:MEA03","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3AMEA03","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"MEA03 — Managed Compliance With External Requirements","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-mea03-99c7dcca.4c2a519aba50add0.json"},{"attributes":{"category":"administrative","framework":"cobit-2019","type":"detective"},"canonicalUrl":"https://evidenceflows.com/frameworks/cobit-2019/","description":"Managed Assurance","details":{"automation":"manual","control_category":"administrative","control_id":"MEA04","control_type":"detective","domains":["Compliance, Audit & Assurance","Governance, Policy & Oversight","Risk Assessment & Management"],"framework":"cobit-2019","group":"Monitor, Evaluate and Assess","key_control":false,"requirement_frequency":null,"requirement_status":null,"risk_count":2,"source_pages":null,"source_url":null},"direct":true,"history":{"digest":"48b740a505e85b6cd9ce16807d6df36198e304a6bb1ea200eb1756370cda2044","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-09-17T22:28:00Z","updatedRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e"},"htmlUrl":"/agents/records/ctrl-cobit-2019-mea04-4181ede5.html","id":"ctrl:cobit-2019:MEA04","mapUrl":"https://evidenceflows.com/?v=1&node=ctrl%3Acobit-2019%3AMEA04","sourceIds":["cobit-2019"],"sourceUrl":null,"title":"MEA04 — Managed Assurance","type":"control","updatedAt":"2026-09-17T22:28:00Z","url":"/assets/agent_record-ctrl-cobit-2019-mea04-4181ede5.e06cdc44e7693782.json"}],"relationships":[{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:030c847a1be8b9e26a68bc890c648c03d31e6d385bf1a1132c0be8f4cb1c9848","properties":{"control_id":"BAI01","coverage":"partial","delta":"BAI01 governs the enterprise programme/portfolio management practice; this development-scoped objective covers project-level planning and resourcing, not enterprise portfolio governance","framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-02-c3b003c2.json","sourceId":"uc:UC-SDLC-02","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-bai01-12e2e132.json","targetId":"ctrl:cobit-2019:BAI01","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:032867964d8caa1f9119972d8d8336c3580a8e4908cc929807dd69afff643b61","properties":{"control_id":"EDM03","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-17-5ee3266f.json","sourceId":"uc:UC-GOV-17","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-edm03-5708b8c4.json","targetId":"ctrl:cobit-2019:EDM03","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:041a6664754708ac5cc6e68b67a32b5e05ae66d528cd1f8ced27d851f1b1619f","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-apo05-ea9d3f42.json","sourceId":"ctrl:cobit-2019:APO05","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:05f47708636fcc22888663483542bc3e8693875eea819fc13c46fbd1ba60f18f","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-apo09-2d1f48e2.json","sourceId":"ctrl:cobit-2019:APO09","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:064c13ba66090a675f3ddc5ec32d06e7ad9429416e49de63db68a7cbc43d4f65","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-dss05-80cfe6d8.json","sourceId":"ctrl:cobit-2019:DSS05","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:0c2e2c85b9714fbd5165ae9492d778c22f92f795b46da8f48f33afce7c701079","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-mea01-d0c28364.json","sourceId":"ctrl:cobit-2019:MEA01","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:160197ef08f9452b849b32bbca9891899e287a820c310d1d8fead407896dae68","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-mea02-4513eb15.json","sourceId":"ctrl:cobit-2019:MEA02","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:165477b789f44ce9d930421335c11f36733e2cb74deaafce7580ec576dacad75","properties":{"control_id":"MEA03","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-24-fa96fe18.json","sourceId":"uc:UC-AUDIT-24","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-mea03-99c7dcca.json","targetId":"ctrl:cobit-2019:MEA03","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:1ebe8d4b78547cfd82fbcc2891be071626367e03eaf85d40e73f49495cd9dd48","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-bai02-80041b74.json","sourceId":"ctrl:cobit-2019:BAI02","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:20a8da436eef1b4a0fbbbe4d5b5bd38b34fd731b712d63eb54a70e05277bf953","properties":{"control_id":"MEA02","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-21-6406caa4.json","sourceId":"uc:UC-AUDIT-21","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-mea02-4513eb15.json","targetId":"ctrl:cobit-2019:MEA02","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:20e4b2a31e5517b32fa223ea9b1b8fd79f1f9756c4fd2ee3519a688b1e5e002f","properties":{"control_id":"DSS02","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-06-c505e5bd.json","sourceId":"uc:UC-BCDR-06","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-dss02-af5bca5d.json","targetId":"ctrl:cobit-2019:DSS02","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:266413b704059cefdeb68ba76808b5444e25095d835aa595a43d1476260b7d3e","properties":{"control_id":"BAI10","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-06-c1afc713.json","sourceId":"uc:UC-SDLC-06","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-bai10-40479176.json","targetId":"ctrl:cobit-2019:BAI10","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:28cbc076c691c4481111652ba581b69d65bc7b35b4c1947853f1515157a6896e","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-dss04-2d611bca.json","sourceId":"ctrl:cobit-2019:DSS04","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:2c09c6aa382cf10f688a037000963947c1f9b7d147e88c98e51e6092f8d40391","properties":{"control_id":"APO01","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-01-e1e2136d.json","sourceId":"uc:UC-GOV-01","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-apo01-d6a49088.json","targetId":"ctrl:cobit-2019:APO01","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:2d670b2f17155b51a6d7d5d6a3db6b48a4ce3945880ec7611dffa694628a2f8f","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-apo12-9086e034.json","sourceId":"ctrl:cobit-2019:APO12","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:2fa9ee745188901dc9cf334d826e8e52a294a06c63ae786f99df85acdb98780d","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-dss02-af5bca5d.json","sourceId":"ctrl:cobit-2019:DSS02","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:34b195b7f7d5b0b72283e64b6687d8f3319af857205f58041ee596a0b56eba98","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-apo13-b83b9404.json","sourceId":"ctrl:cobit-2019:APO13","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:35eebd189f1575ee338fadccdde6be2f9eded242acad4ddcb3aa02c74807db27","properties":{"control_id":"BAI09","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-12-08ce2fc7.json","sourceId":"uc:UC-SDLC-12","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-bai09-09a008c3.json","targetId":"ctrl:cobit-2019:BAI09","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:365ae16f1a091922dbe4378ba6036bae12ac52ffec685123bb60d72a9fbe1dd3","properties":{"control_id":"APO05","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-13-81b348eb.json","sourceId":"uc:UC-GOV-13","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-apo05-ea9d3f42.json","targetId":"ctrl:cobit-2019:APO05","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:36c6e5ac6d05e57620f65d498b9f7a8786293c1b6831590d42c8b49fdbd7d40e","properties":{"control_id":"EDM02","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-13-81b348eb.json","sourceId":"uc:UC-GOV-13","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-edm02-4b1996ae.json","targetId":"ctrl:cobit-2019:EDM02","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:370cdf65e7c075f535cb8de2c18981945e047981f1fb17ea8691fdd1d54baef6","properties":{"control_id":"MEA01","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-22-2a70149b.json","sourceId":"uc:UC-AUDIT-22","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-mea01-d0c28364.json","targetId":"ctrl:cobit-2019:MEA01","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:38b71db227415791cd2d208547a6ed1dc84004cc6f116e18ba9e5a584fcb4a0e","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-mea04-4181ede5.json","sourceId":"ctrl:cobit-2019:MEA04","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:39dff700e2a0bbdef624f431f6804954b71d44876cada877e7f382362a2cddea","properties":{"control_id":"APO14","coverage":"partial","delta":"operational data management - data-management strategy, business glossary/metadata, data-quality profiling and cleansing, archiving/backup - beyond governance policy and oversight bodies","framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-20-4a468c1a.json","sourceId":"uc:UC-GOV-20","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-apo14-ab650d02.json","targetId":"ctrl:cobit-2019:APO14","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:3bd43539bb786f85240cea4b1fb5bd69ec14f48526c064176fdbb9189dd5b27d","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-edm03-5708b8c4.json","sourceId":"ctrl:cobit-2019:EDM03","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:494f71c171b62c71568247a14a50ed91f12978cf48211592b92b04d4f030328e","properties":{"control_id":"BAI03","coverage":"partial","delta":"full solution build, component, and maintenance life cycle satisfied by companion controls","framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-04-ee9d76b1.json","sourceId":"uc:UC-SDLC-04","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-bai03-bfe681b0.json","targetId":"ctrl:cobit-2019:BAI03","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:4a56783ad6dcc794d803ee7fe980c8690886e0375e32405c74497491ed4b0b70","properties":{"control_id":"APO07","coverage":"partial","delta":"workforce capacity/utilization planning and contract-staff management, beyond attracting, developing, and retaining competent personnel","framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-10-016614d1.json","sourceId":"uc:UC-GOV-10","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-apo07-20c9bdf0.json","targetId":"ctrl:cobit-2019:APO07","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:4a8e22f593fe67551313edcaf4b955e046be41974b6272570b56b85ab824f27d","properties":{"control_id":"APO04","coverage":"partial","delta":"APO04 also requires technology-trend scanning and fostering an innovation-conducive environment","framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-13-81b348eb.json","sourceId":"uc:UC-GOV-13","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-apo04-e419c159.json","targetId":"ctrl:cobit-2019:APO04","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:4afb84782e3cec6bd552916b34f8b15f3759125ed7ec2be222c7c91b5a6e3a61","properties":{"control_id":"APO06","coverage":"partial","delta":"full IT financial management including cost transparency and allocation models","framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-11-a13b60d3.json","sourceId":"uc:UC-GOV-11","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-apo06-2191e824.json","targetId":"ctrl:cobit-2019:APO06","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:4c7effc1e728339a4e8a777ea4487a722140f1a715d83dbe1b941a4af5afdd1d","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-apo01-d6a49088.json","sourceId":"ctrl:cobit-2019:APO01","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:4d020ab7073efe5409fd669b95803adf581ca2a0bf3baf1cc79b33b073329bec","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-edm05-c0483b9a.json","sourceId":"ctrl:cobit-2019:EDM05","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:512ba21439e87bc291748f791f63165c51c302598232ea229c29542a3578a201","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-dss03-2540740f.json","sourceId":"ctrl:cobit-2019:DSS03","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:5565d9ecf7ae5f03599e83bd0cb9e5caf5c2d8d89ac1d256fe39783e5332d0b6","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-apo03-5d678454.json","sourceId":"ctrl:cobit-2019:APO03","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:66c476cbded0770a1dfb5dac88dbddc813fd47b5a6cffddb59a967f1f0fe2087","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-bai10-40479176.json","sourceId":"ctrl:cobit-2019:BAI10","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:687aade0ed345b958e16046bbe0bcd893b874ad9fafd1bb20a1d02d2f1d37595","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-bai11-fbe7d977.json","sourceId":"ctrl:cobit-2019:BAI11","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:6a23db00aa832f70449f5331387a49a9848a48c33ed9aec1c9cbbd1cfd41d482","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-bai04-c6901e71.json","sourceId":"ctrl:cobit-2019:BAI04","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:6af6976069665b10d4b3552ac957d6046868428cb13f6aad904d27fc4a1976ab","properties":{"control_id":"APO13","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-15-828b3eec.json","sourceId":"uc:UC-GOV-15","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-apo13-b83b9404.json","targetId":"ctrl:cobit-2019:APO13","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:6cd89c31a0f6722453e9f1cb4ee69e4fdb4992f60f3243d03259b9058b5738c2","properties":{"control_id":"DSS01","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"equal","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-12-0d9cc358.json","sourceId":"uc:UC-BCDR-12","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-dss01-d3ff2961.json","targetId":"ctrl:cobit-2019:DSS01","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:7484f9d3ad03a124617eeca495401713a19159bfd21a319c6d70154ec7379829","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-apo04-e419c159.json","sourceId":"ctrl:cobit-2019:APO04","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:74e883a4246ff37ceb111e94ede879200b02479a84eda309b5816228465bece2","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-dss06-c2b31b0e.json","sourceId":"ctrl:cobit-2019:DSS06","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:75a79039f825fe12949becc0699504543d81d39d52729d9e782eea75558bc642","properties":{"control_id":"MEA04","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-23-124d94d5.json","sourceId":"uc:UC-AUDIT-23","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-mea04-4181ede5.json","targetId":"ctrl:cobit-2019:MEA04","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:7843c3f12abcbdae8c0226c23f8a2d755a402c4d56140aecef697acc9b4fe5df","properties":{"control_id":"DSS04","coverage":"partial","delta":"continuity testing, training, and post-incident review satisfied by companion controls","framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-01-428f23d3.json","sourceId":"uc:UC-BCDR-01","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-dss04-2d611bca.json","targetId":"ctrl:cobit-2019:DSS04","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:7f09401880d79a7d47360a60cf925b304d7d26eb19a9b83c74431e9b98b0ebd6","properties":{"control_id":"APO11","coverage":"partial","delta":"embedding quality management practices across processes, projects, and deliverables","framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-22-c0b503b4.json","sourceId":"uc:UC-GOV-22","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-apo11-92538e06.json","targetId":"ctrl:cobit-2019:APO11","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:8617482233ffe8bfa5309d39b6d520746dc930ecdc68348f52565c031c767fce","properties":{"control_id":"EDM04","coverage":"partial","delta":"governance of optimization across all enterprise IT resources (people, technology, infrastructure), beyond security-scoped budget and personnel","framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-11-a13b60d3.json","sourceId":"uc:UC-GOV-11","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-edm04-7ad4bdc3.json","targetId":"ctrl:cobit-2019:EDM04","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:8fdc7830079a5918f12dfa65dd2161ce222fcb194b0dc79ac6ab41841a9a5717","properties":{"control_id":"BAI06","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-07-22470d8b.json","sourceId":"uc:UC-SDLC-07","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-bai06-306e8a70.json","targetId":"ctrl:cobit-2019:BAI06","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:94968332499f1103f173cd77196d50bc0dcff5ac97d9906f1d4138683c245e28","properties":{"control_id":"BAI11","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-02-c3b003c2.json","sourceId":"uc:UC-SDLC-02","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-bai11-fbe7d977.json","targetId":"ctrl:cobit-2019:BAI11","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:96f2fb180f84f99fb86941c3b49202eb0caef57d3105f6680d156665adeddebd","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-dss01-d3ff2961.json","sourceId":"ctrl:cobit-2019:DSS01","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:96fe8cd5e6550663eb4ec5bf19b88679bf108221016937cf868e836905365c8f","properties":{"control_id":"BAI07","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-07-22470d8b.json","sourceId":"uc:UC-SDLC-07","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-bai07-dcabfa26.json","targetId":"ctrl:cobit-2019:BAI07","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:970b37f571d1289fab1672f15a9bbee65cc4f9e65d4b8ebc43b29dbcfe7256f8","properties":{"control_id":"EDM01","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-01-e1e2136d.json","sourceId":"uc:UC-GOV-01","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-edm01-95fe0a96.json","targetId":"ctrl:cobit-2019:EDM01","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:982ffd5bf47a09cb0d66592478e9216757aada63479fa0423b2afa1ff2452f3f","properties":{"control_id":"BAI05","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-09-659d0280.json","sourceId":"uc:UC-SDLC-09","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-bai05-782c2ba0.json","targetId":"ctrl:cobit-2019:BAI05","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:98948334f16c82e75fc7875acb9c6157cf1ad71bc9ad5f00b29cd6d8000c1963","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-bai06-306e8a70.json","sourceId":"ctrl:cobit-2019:BAI06","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:9a6fbed9e489613a8371aa786123991431f383218b1fad7b83994f3b1fa9b4fe","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-bai01-12e2e132.json","sourceId":"ctrl:cobit-2019:BAI01","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:9b1ac6bfa799e9a878a2f3298cc3d84973dc3ed7da85beabe618a4380720ef55","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-bai03-bfe681b0.json","sourceId":"ctrl:cobit-2019:BAI03","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:9fa3d3c91726a4a890c2543bd8ae26001b16207ec017301c6e58893cd622b8a6","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-bai09-09a008c3.json","sourceId":"ctrl:cobit-2019:BAI09","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:a3b4fac9eeb2aeaac7e22e209619356e1fc4b3b7ddba114ab2d9d52d00099493","properties":{"control_id":"EDM05","coverage":"partial","delta":"evaluating stakeholder engagement/reporting requirements and monitoring engagement effectiveness at the governance layer, beyond performing communication and reporting","framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-21-8c5d79f9.json","sourceId":"uc:UC-GOV-21","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-edm05-c0483b9a.json","targetId":"ctrl:cobit-2019:EDM05","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:a4b2f502292f978777af5dfd48e8999c55e77d6f23ea481d1933266e011e2a12","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-bai08-9f5f3d72.json","sourceId":"ctrl:cobit-2019:BAI08","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:a74af9c3e6f125055de8d642a9daf7c64db8af1b078ca424106bf9353a63b6c0","properties":{"control_id":"BAI04","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"equal","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-13-ae800997.json","sourceId":"uc:UC-SDLC-13","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-bai04-c6901e71.json","targetId":"ctrl:cobit-2019:BAI04","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:a7a74ed899c6ff896286f35d35109816d9ec166a06a448af63e66dfd804745a7","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-apo11-92538e06.json","sourceId":"ctrl:cobit-2019:APO11","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:a8cee9dde29a243b600f5ad0128cf7aa74a7d87d1be4519238792fcbf2469e27","properties":{"control_id":"DSS05","coverage":"partial","delta":"also identity/logical access, physical access, and sensitive-document/output-device controls","framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-13-aa7feb8e.json","sourceId":"uc:UC-BCDR-13","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-dss05-80cfe6d8.json","targetId":"ctrl:cobit-2019:DSS05","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:a9c21cb9b25d0672e34ba3509ac1069d58338117d3fe68376e2e33f9616b19e6","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-bai07-dcabfa26.json","sourceId":"ctrl:cobit-2019:BAI07","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:a9edce24ec99044ebcc918f2f32a590d00d0b76979d26a83751525cff6d42b33","properties":{"control_id":"APO12","coverage":"partial","delta":"operational risk identification, assessment, and response processes","framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-17-5ee3266f.json","sourceId":"uc:UC-GOV-17","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-apo12-9086e034.json","targetId":"ctrl:cobit-2019:APO12","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:b48d208fc579b8bfaf3f263db5da6c421457ede838fd19c511096175349f2716","properties":{"control_id":"APO10","coverage":"partial","delta":"day-to-day vendor performance monitoring and contract administration","framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-tprm-01-16b62053.json","sourceId":"uc:UC-TPRM-01","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-apo10-2c3cb0dc.json","targetId":"ctrl:cobit-2019:APO10","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:b4c6b61aad8707cab70cd5ca0fd1cca9088df571ff39794a1db20673515a2460","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-apo08-6c76314b.json","sourceId":"ctrl:cobit-2019:APO08","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:bfb7de3a8015b3a23a00a22565f5ec4ed0ddcdd12489f4bb54574cd8ddbc7472","properties":{"control_id":"DSS03","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-06-c505e5bd.json","sourceId":"uc:UC-BCDR-06","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-dss03-2540740f.json","targetId":"ctrl:cobit-2019:DSS03","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:c928b3c5d2c020d22ad226062bb2e1ad663ed8de9a59a550ae28c7cd54a72a21","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-edm04-7ad4bdc3.json","sourceId":"ctrl:cobit-2019:EDM04","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:d48739629f27ebf74e1abf8e7ac546403e3835cefc31839403687da5212a0e56","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-apo10-2c3cb0dc.json","sourceId":"ctrl:cobit-2019:APO10","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:dfbda93476c25cd552d1253bfc6e614f83807e71b80d04d3c61355f7d3b2f5c3","properties":{"control_id":"BAI02","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-03-5de4daf8.json","sourceId":"uc:UC-SDLC-03","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-bai02-80041b74.json","targetId":"ctrl:cobit-2019:BAI02","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:e1d3b60ec55d2ba06662780df041b309092dbbf76738f7d5a030fa2f637b11dc","properties":{"control_id":"DSS06","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"equal","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-bcdr-14-997de451.json","sourceId":"uc:UC-BCDR-14","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-dss06-c2b31b0e.json","targetId":"ctrl:cobit-2019:DSS06","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:e270e94ce54063c9c8a81d2beab1319d0273c73b72377cee36700631917c486c","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-edm02-4b1996ae.json","sourceId":"ctrl:cobit-2019:EDM02","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:eaa1921da3a2649c4cdd39f81d36c57c29574d8188b50a719df47c091df061ea","properties":{"control_id":"APO08","coverage":"partial","delta":"active business-IT relationship and demand management beyond communication","framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-21-8c5d79f9.json","sourceId":"uc:UC-GOV-21","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-apo08-6c76314b.json","targetId":"ctrl:cobit-2019:APO08","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:eb2763c24ae0bb6b3625b11233e6e45a9a11273627780a51ee50b96a9c66f2a8","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-apo14-ab650d02.json","sourceId":"ctrl:cobit-2019:APO14","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:eb4f44d97f08b10b4d8988ddd92feffde262f146c9d895c2b11f7766e58f875d","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-mea03-99c7dcca.json","sourceId":"ctrl:cobit-2019:MEA03","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:ec12eedda1de13de98fa6891f9f791b3b3dae6903f4d6bd9259f131e9b9310df","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-edm01-95fe0a96.json","sourceId":"ctrl:cobit-2019:EDM01","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:f0150af56262db15849d35b4a2f4499b9160beb986a4920fc1b938b468b1a1fd","properties":{"control_id":"APO03","coverage":"partial","delta":"EA vision and multi-domain (business/data/application/technology) reference architecture plus enterprise-architecture services, beyond security/privacy architecture","framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-19-115302cb.json","sourceId":"uc:UC-GOV-19","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-apo03-5d678454.json","targetId":"ctrl:cobit-2019:APO03","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:f16e284a257e8b96794e10fbe08c1efc2c5e2fe1149b35ef766faf310ffbd634","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-apo06-2191e824.json","sourceId":"ctrl:cobit-2019:APO06","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:f2e4069dd7a05f05bd0106465d7dbcd580dfdf7eb3d7a5324c1de163edd4a76c","properties":{"control_id":"APO02","coverage":"full","delta":null,"framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-gov-12-5c560a78.json","sourceId":"uc:UC-GOV-12","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-apo02-52b0bcbe.json","targetId":"ctrl:cobit-2019:APO02","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:f4913757b9a3f79e7cec28d3765d3acb63ca365f9150bfe794f91c4ecdd4fe6c","properties":{"control_id":"BAI08","coverage":"partial","delta":"enterprise-wide knowledge management extends beyond system documentation","framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-08-29ce69df.json","sourceId":"uc:UC-SDLC-08","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-bai08-9f5f3d72.json","targetId":"ctrl:cobit-2019:BAI08","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:fa1e03375b19113343f4dead8c7384d2ce6473a62a0177095daa5a8303d69ee2","properties":{"control_id":"APO09","coverage":"partial","delta":"service catalog definition and SLA lifecycle management","framework":"cobit-2019","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"intersects_with","source_version":"2019"},"sourceDetailPath":"/data/v1/records/uc-uc-tprm-01-16b62053.json","sourceId":"uc:UC-TPRM-01","targetDetailPath":"/data/v1/records/ctrl-cobit-2019-apo09-2d1f48e2.json","targetId":"ctrl:cobit-2019:APO09","type":"maps_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:fd5cc5846bbd4085805c3d24cd1befae5131799d97c039cee1e51044e90de1c6","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-apo07-20c9bdf0.json","sourceId":"ctrl:cobit-2019:APO07","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:fda234c9ec65b45c451ed32df4769fd66598af9f126f784a647a1bf79b5cf27a","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-apo02-52b0bcbe.json","sourceId":"ctrl:cobit-2019:APO02","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:ff6d62d55e995572524415f934cd53112d2645892288fd173516f0692dc389be","properties":{},"sourceDetailPath":"/data/v1/records/ctrl-cobit-2019-bai05-782c2ba0.json","sourceId":"ctrl:cobit-2019:BAI05","targetDetailPath":"/data/v1/records/std-cobit-2019-2181ce0c.json","targetId":"std:cobit-2019","type":"belongs_to"}],"schemaVersion":1,"scope":"sources","total":208}