{
  "kind": "grc-template",
  "version": 1,
  "template": "control-inventory",
  "exportedAt": "2026-11-01T12:00:00+00:00",
  "fields": {
    "control": "ILLUSTRATIVE STARTER — replace with your own record. GRC-C01: Check authority before a significant commitment\nRisk addressed: A commitment is approved without the right authority, supporting evidence or clear conditions.",
    "operation": "In this example, the proposed decision is routed to an authorised approver, who checks the options, evidence and approval conditions before recording the decision.\nSuggested operating trigger: a commitment reaches an agreed approval threshold or falls outside an existing delegation.\nAssign the actual owner and frequency for your organisation.",
    "evidence": "Suggested evidence references — replace with your own:\n- The delegated-authority record applicable on the decision date.\n- The decision paper and supporting records available to the approver.\n- The approved decision, reasons, conditions and follow-up owner.",
    "test": "SUGGESTED TEST — NOT PERFORMED. Select significant commitments from a defined period; compare the approval date and decision-maker with the authority record, then trace any conditions to follow-up evidence. Record selection limits.",
    "finding": "NOT TESTED. Record actual observations and the limitations of the review.\nPotential failure indicator: The commitment predates approval, the approver lacks recorded authority or an approval condition has no follow-up.",
    "action": "Assign a specific outcome, accountable owner and planning date after reviewing the findings.",
    "retest": "NO RETEST PERFORMED. Keep claimed completion separate from actual verification."
  }
}