Finding remediation and retest

Step by step

1. Open finding Compliance Lead

   Compliance Lead records severity and a clear description, linked to the assessment and control that raised the issue.

   • Describes the issue and its source
   • Updates Findings, Assessment tests, Controls

2. Plan correction Action Owner

   Action Owner receives a corrective action with due date and proposed evidence. The finding moves toward action planned.

   • Assigns owner and due date
   • Updates Corrective actions, Findings

3. Do the work Action Owner

   The owner updates the action from planned to in progress and records the corrective evidence and completion date.

   • Records progress and evidence
   • Updates Corrective actions

4. Submit action Action Owner

   The owner marks the action submitted for an independent check. The original failed test remains available.

   • Changes Status to Submitted
   • Updates Corrective actions

5. Verify correction Independent Reviewer

   Independent Reviewer records a retest result and evidence against the finding. A pass supports verification; fail or inconclusive keeps the issue open.

   • Records independent result
   • Updates Retests, Findings, Corrective actions
   ApprovalA person approves before the work moves on.

6. Close finding Compliance Lead

   Compliance Lead checks the action, retest and original assessment before closing the finding.

   • Records the resolved issue
   • Updates Findings, Assessments

Compliance Lead

, Action Owner, Independent Reviewer, Control Owner.