1. Audit Management
  2. Process
  3. Finding review
Process · Finding review

Finding review

Check the evidence and record the Audit Manager's finding decision.

Step by step

  1. Prepare finding Auditor

    The Auditor describes the exception, records its evidence reference and sets the response due date. Check the business unit, organization and assessment before requesting review. The description should identify the issue a Control Owner can investigate without relying on an earlier meeting.

    • Describe and link the Draft finding
    • Updates Findings, Assessments, Business units, Organizations
  2. Request review Auditor

    The Auditor moves the prepared finding from Draft to Pending Approval under the team's review procedure. The Audit Manager opens the evidence and checks that it supports the description. Resolve document access problems before treating the finding as ready for a decision.

    • Prepare Pending Approval and inspect support
    • Updates Findings, Record attachments
  3. Approve finding Audit Manager

    The Audit Manager approves a supported finding through the finding review action. Inspect the change to Approved, the review decision and the operation receipt. If the reviewer chooses Return or Reject, record the reason and follow the agreed revision procedure before requesting another review.

    • Record approval and its action result
    • Updates Findings, Review decisions, Operation receipts
    ApprovalA person approves before the work moves on.
  4. Prepare the response handoff Control Owner

    The Control Owner reads the reviewed finding and its response due date. Use the finding reference when preparing the corrective response so the next reviewer can connect the proposed work to the issue that prompted it.

    • Use the reviewed finding in response preparation
    • Updates Findings, Corrective actions

Where it usually breaks

And how to keep it from happening.

  • An evidence reference is meaningful only to its author. Give the reviewer enough context to locate and understand the material.
  • A response date is set without checking who will supply the response. Agree the follow-up arrangement before handing over the finding.
  • A Return decision contains no usable reason. Explain what the Auditor needs to address before another review.
Auditor
, Audit Manager, Control Owner, Independent Assurance Reviewer.

Set up Audit Management your way.

Start free, then use Proto to change fields, steps and approvals before your team goes live.

How to get started