{
  "kind": "grc-template",
  "version": 1,
  "template": "control-inventory",
  "exportedAt": "2026-11-01T12:00:00+00:00",
  "fields": {
    "control": "ILLUSTRATIVE STARTER — replace with your own record. GRC-C13: Connect an obligation to an operational outcome\nRisk addressed: A requirement is recorded without a reasoned scope decision, accountable owner or evidence of performance.",
    "operation": "In this example, the obligation owner checks the source and applicability, identifies the process intended to fulfil it and records where evidence of performance can be inspected.\nSuggested operating trigger: a new activity or commitment, a source change or the chosen applicability review.\nAssign the actual owner and frequency for your organisation.",
    "evidence": "Suggested evidence references — replace with your own:\n- The precise source, provision or commitment and version checked.\n- The affected entity and activity, applicability rationale and unresolved questions.\n- The responsible owner, operating control and recent performance record.",
    "test": "SUGGESTED TEST — NOT PERFORMED. Select consequential register entries; trace each from the recorded source and scope decision to a recent process outcome. Record unclear interpretation and missing evidence separately.",
    "finding": "NOT TESTED. Record actual observations and the limitations of the review.\nPotential failure indicator: The entry contains only a broad legal title or policy link, with no identifiable outcome or delivery owner.",
    "action": "Assign a specific outcome, accountable owner and planning date after reviewing the findings.",
    "retest": "NO RETEST PERFORMED. Keep claimed completion separate from actual verification."
  }
}