Testing and remediation

Step by step

1. Test control Tester

   Tester records the tested date, sample size, exception count, result and evidence reference against the control and assessment.

   • Capture the sample and result
   • Updates Assessment tests, Controls, Assessments

2. Review findings Tester

   Tester describes the exception as a finding; Compliance Lead checks severity and confirms the affected control.

   • Describe and rate the issue
   • Updates Findings, Assessment tests

3. Plan correction Remediation Owner

   Remediation Owner accepts the finding, chooses a due date and records the corrective work required.

   • Assign an owner and due date
   • Updates Corrective actions, Findings

4. Submit evidence Remediation Owner

   The owner records the completed action and evidence for review rather than closing the finding directly.

   • Show what changed
   • Updates Corrective actions

5. Verify correction Independent Reviewer

   Independent Reviewer checks the changed work and records a retest result with its own evidence.

   • Record an independent test
   • Updates Retests, Findings

6. Return or close Compliance Lead

   A failed or inconclusive check remains for further work; a passing check supports verification and finding closure.

   • Keep the outcome visible
   • Updates Findings, Corrective actions, Retests

Tester

, Compliance Lead, Remediation Owner, Independent Reviewer, Control Owner.