Finding to independent retest

Step by step

1. Open finding Control Owner

   Control Owner records the deficiency, severity and affected control.

   • Open case
   • Updates Findings, Controls

2. Plan action Control Owner

   The action owner records the due date and proposed correction.

   • Set owner and date
   • Updates Corrective actions, Team members

3. Submit evidence Control Owner

   The action owner supplies completion evidence for review.

   • Submit work
   • Updates Corrective actions

4. Retest independently Independent Assurance Reviewer

   Independent Assurance Reviewer records the retest result and evidence.

   • Test correction
   • Updates Retests, Findings

5. Verify outcome Independent Assurance Reviewer

   Independent Assurance Reviewer checks whether the retest supports verified action and closed finding.

   • Record outcome
   • Updates Retests, Corrective actions, Findings

Control Owner

Prepares records; Independent Assurance Reviewer decides and reconciles evidence; Auditor reads the authorized history; App Administrator maintains organization access.