These cookies are required for the website to function properly. They ensure security, enable basic features like page navigation, and store user session data. You cannot disable these cookies.
- GRC Audit Compliance
- Process
- Verified closure
Verified closure
Work a finding through correction, retest and receipt reconciliation.
Step by step
-
Assign correction Remediation Owner
Remediation Owner receives the finding, due date and expected evidence.
- Status: Open to action planned
- Updates Findings, Corrective actions
-
Submit evidence Remediation Owner
Remediation Owner records the work and submits its evidence.
- Status: In progress to Submitted
- Updates Corrective actions
-
Retest independently Independent Reviewer
Independent Reviewer records the tested date, result and evidence; a pass supports closure.
- Record Pass, Fail or Inconclusive
- Updates Retests, Findings
ApprovalA person approves before the work moves on. -
Close the finding Independent Reviewer
Independent Reviewer checks the submitted assurance review revision, records a decision and approves closure after the passing retest and saved effects are linked.
- Status: Retest to Closed after the submitted review decision and saved effects
- Updates Findings, Retests, Assurance reviews, Review decisions, Corrective actions
ApprovalA person approves before the work moves on. -
Reconcile operations Admin
Admin examines failed or uncertain receipts and their persisted effects before resolving the result state.
- Completed or needs review
- Updates Idempotency receipts, Review decisions
Who does what
Roles and permissions- Remediation Owner
- , Independent Reviewer, Admin.
- The person named at each stage owns that action; Admin manages access and checks uncertain operation outcomes where needed.
Set up GRC Audit Compliance your way.
Start free, then use Proto to change fields, steps and approvals before your team goes live.