Finding to retest

Step by step

1. Open finding Compliance Manager

   The Compliance Manager records severity and description against the assessment and control after examining the failed or inconclusive test.

   • Record the source issue, severity and Open status.
   • Updates Findings, Assessments, Controls

2. Plan action Remediation Owner

   The Remediation Owner takes responsibility for the linked correction, due date and evidence, while the finding remains open.

   • Assign owner, due date and Planned status.
   • Updates Corrective actions, Findings

3. Submit evidence Remediation Owner

   The Remediation Owner moves the action through in progress to Submitted and records the completed work. Submission asks for examination; it does not verify the finding.

   • Record completion evidence and Submitted status.
   • Updates Corrective actions

4. Retest finding Retest Reviewer

   A Retest Reviewer checks the original issue independently and records a dated Pass, Fail or Inconclusive result with evidence.

   • Record an independent result and evidence.
   • Updates Retests, Findings

5. Verify action Compliance Manager

   The Compliance Manager checks the retest and action trail before marking the action Verified or the finding Closed. A failed or inconclusive retest keeps the issue in work.

   • Examine the result before verification or closure.
   • Updates Corrective actions, Findings, Retests

Remediation Owner

, Retest Reviewer, Compliance Manager.