Description
Count distinct exact owner strings and mark vacant for zero owners.
Security administration uses retention periods, control owners, acknowledgments, recovery targets, and test records. Arithmetic and labels can make these records consistent, but they do not demonstrate that a control works or that a policy is adequate.
Count distinct exact owner strings and mark vacant for zero owners.
When to use this tool
Use Security Control Owner Vacancy when you need a narrow security-record calculation or formatter under supplied policy values.
How to use the tool and how it works
- Enter controlId, ownerIds. Use the units and conventions below.
- Run the tool. Correct any format, range, or cross-field input error before interpreting the output.
- Read vacant, distinctOwnerCount. Inspect vacant before interpreting the associated values.
Require nonempty controlId and nonblank owner IDs. Count distinct exact owner strings and mark vacant for zero owners.1
| Input field | Meaning and units | Accepted input |
|---|---|---|
| controlId | Control Id | Required. Text; maximum UTF-16 length 8192. |
| ownerIds | Owner Ids | Required. Array of text; maximum UTF-16 length 8192; maximum items 256. |
| Output field | Interpretation | Returned shape |
|---|---|---|
| vacant | Vacant | Required. Boolean. |
| distinctOwnerCount | Distinct Owner Count | Required. Safe integer. |
{
"input": {
"controlId": "C17",
"ownerIds": []
},
"output": {
"vacant": true,
"distinctOwnerCount": 0
}
}Limitations and assumptions
- Whitespace is checked but not normalized before deduplication; listed owners do not prove responsibility, authority, or control effectiveness.
- Inputs must satisfy both the field types and the cross-field conditions above. Invalid input causes an error; a successful false flag or documented placeholder is a different result.
Alternative or Complementary methods
Review the complete control evidence, applicable policy, and operational tests before making a security decision.
References
Similar or alternative tools
- Task Owner Vacancy Flag
Require nonempty taskId and mark vacant when ownerId contains only whitespace or is empty.
- Professional Role Recusal Label
Require nonempty role and append recused or not recorded as recused according to the Boolean flag.