Remediation and retest

Step by step

1. Record findings Control Owner

   The Control Owner opens a finding for a failed control test, names the severity and links the assessment and control.

   • Opens linked exception
   • Updates Findings, Assessment tests, Controls

2. Assign corrective action Control Owner

   A named owner receives the action, due date and expected evidence. The action moves through planned and in progress work toward submission.

   • Gives corrective work an owner and due date
   • Updates Corrective actions, Team members

3. Retest finding Independent Assurance Reviewer

   The Independent Assurance Reviewer records a dated retest with evidence and a pass, fail or inconclusive outcome.

   • Records independent result and evidence
   • Updates Retests, Findings

4. Close finding Independent Assurance Reviewer

   A passing retest supports closure. A fail or inconclusive outcome keeps the finding in follow-up and the original failed test visible.

   • Resolves finding after passing evidence
   • Updates Findings, Corrective actions, Retests

Control Owner

, Independent Assurance Reviewer, Assigned Tester, Auditor.