BloomSpec
Entities

Control

A documented internal control: its objective, description, owner, frequency, framework mapping and test procedure.

Volume

Tens to hundreds per tenant

Retention

Indefinite

Entity attributes8
  • framework_mapping
  • test_procedure
  • objective / description
  • last_evaluated_at
  • control_id
  • Every transactional row must carry a tenant identifier from the outset, even in a single-tenant deployment.
  • owner_id
  • frequency
Entity relationships1
Capability entities1
Entity lifecycle

Not yet researched

Only the control-bearing entities were modelled for lifecycle. Defensible as a starting point, but it does leave the entity model uneven, and this is incompleteness rather than a finding.

Capability operations4