Resolve a finding

Step by step

1. Review the finding Control Owner

   The Control Owner reads its description, severity, assessment and control.

   • Confirm the issue and control
   • Updates Findings 2, Controls 2

2. Plan the action Control Owner

   The owner sets the corrective action's assignee and due date.

   • Set owner and due date
   • Updates Corrective actions 2, Team members 2

3. Complete the work Control Owner

   The assignee records completion evidence and date.

   • Record evidence and completion
   • Updates Corrective actions 2

4. Submit for verification Control Owner

   The action moves to the submitted state for review.

   • Present the action for review
   • Updates Corrective actions 2

5. Retest independently Independent Assurance Reviewer

   The Independent Assurance Reviewer records a dated result and evidence.

   • Record independent outcome
   • Updates Retests 2, Findings 2
   ApprovalA person approves before the work moves on.

6. Close the issue Independent Assurance Reviewer

   The team closes the finding after the outcome supports closure.

   • Finish the finding history
   • Updates Findings 2, Corrective actions 2

Control Owner

Owns corrective work; Independent Assurance Reviewer records the retest result; Auditor reads the full history.