Test to remediation

Step by step

1. Test controls Assessment Owner

   Assessment Owner records the sample, exception count, evidence reference and result on the planned test.

   • Records observed exception
   • Updates Assessment tests, Assessments, Controls

2. Register finding Assessment Owner

   A Fail or Inconclusive result gives the owner a reason to open a finding against the tested control and parent assessment.

   • Creates linked issue with severity
   • Updates Findings, Assessment tests

3. Plan corrective action Remediation Owner

   Remediation Owner accepts a due date, intended completion date and specific work plan.

   • Assigns response and due date
   • Updates Corrective actions, Findings, Team members

4. Submit corrective evidence Remediation Owner

   The action owner records progress and submits evidence for independent examination.

   • Presents completed work for review
   • Updates Corrective actions, Record attachments

5. Independent retest Independent Reviewer

   Independent Reviewer decides whether the corrected activity passes. The action owner cannot decide closure.

   • Determines whether closure is supported
   • Updates Retests, Findings, Corrective actions
   ApprovalA person approves before the work moves on.

Assessment Owner

, Control Owner, Remediation Owner, Independent Reviewer, Admin.