These cookies are required for the website to function properly. They ensure security, enable basic features like page navigation, and store user session data. You cannot disable these cookies.
- GRC for Banking and Financial Services
- Process
- Retest to closure
Retest to closure
Make finding closure depend on separate review of corrective evidence.
Step by step
-
Plan corrective action Remediation Owner
Remediation Owner records the response and target date on a finding.
- Names owner, dates and plan
- Updates Corrective actions, Findings
-
Submit corrective evidence Remediation Owner
The owner records the work and marks the action Submitted for examination.
- Makes work ready to examine
- Updates Corrective actions, Record attachments
-
Independent retest Independent Reviewer
Independent Reviewer tests the changed control, names the result and keeps fresh evidence. The reviewer must differ from the action owner.
- Records separate result
- Updates Retests, Findings, Team members
ApprovalA person approves before the work moves on. -
Close finding Independent Reviewer
A Pass permits the finding to become Closed and the action Verified. Fail and Inconclusive leave the issue open.
- Keeps outcome aligned to passing evidence
- Updates Findings, Corrective actions, Retests
-
Review assessment Independent Reviewer
The assessment reviewer considers remaining findings and the tested evidence when recording a revision-bound decision.
- Records independent judgment on a revision
- Updates Review decisions, Assessments
ApprovalA person approves before the work moves on.
Who does what
Roles and permissions- Remediation Owner
- , Independent Reviewer, Assessment Owner, Admin.
Set up GRC for Banking and Financial Services your way.
Start free, then use Proto to change fields, steps and approvals before your team goes live.