{
  "kind": "grc-template",
  "version": 1,
  "template": "control-inventory",
  "exportedAt": "2026-11-01T12:00:00+00:00",
  "fields": {
    "control": "ILLUSTRATIVE STARTER — replace with your own record. GRC-C14: Verify implementation after a regulatory change\nRisk addressed: A source update leads to amended documents while the affected systems, staff or processes remain unchanged.",
    "operation": "In this example, the change owner records source status and applicability, maps affected operations, assigns implementation work and checks an actual process outcome before proposing closure.\nSuggested operating trigger: a relevant official-source update or new information affecting the applicability assessment; actual deadlines need separate checking.\nAssign the actual owner and frequency for your organisation.",
    "evidence": "Suggested evidence references — replace with your own:\n- The official source, status and relevant dates checked.\n- The applicability assessment and map of affected policies, systems and people.\n- Implementation records and a post-change check with unresolved issues visible.",
    "test": "SUGGESTED TEST — NOT PERFORMED. Select a change marked implemented; follow one affected process through the revised procedure and compare the operating evidence with the planned outcome. Check that source dates and internal targets remain distinct.",
    "finding": "NOT TESTED. Record actual observations and the limitations of the review.\nPotential failure indicator: The action closes when drafting ends, although the affected system or staff instruction has not changed.",
    "action": "Assign a specific outcome, accountable owner and planning date after reviewing the findings.",
    "retest": "NO RETEST PERFORMED. Keep claimed completion separate from actual verification."
  }
}