Testing and findings

Step by step

1. Execute tests Control Owner

   The Control Owner records the test date, sample size, exceptions, result and evidence reference against the planned control.

   • Record result against the planned control
   • Updates Assessment tests, Assessments, Controls

2. Register findings Assessment Owner

   The Assessment Owner describes a specific issue from a failed or inconclusive test, names its severity and links the assessment and control.

   • Preserve severity and the specific issue
   • Updates Findings, Assessment tests, Controls, Assessments

3. Assign corrective actions Finding Owner

   The Finding Owner receives a dated action with evidence expectations; the finding remains open for verification.

   • Name owner, due date and evidence
   • Updates Corrective actions, Findings, Team members

Control Owner

Records the test; Assessment Owner registers the finding; Finding Owner prepares corrective work; Independent Reviewer later verifies it.