Platform capability
Findings & Remediation
Track issue severity, root cause, owners, due dates, and verification through to closure — so findings don't quietly go stale.
The business problem
- Findings are recorded in a report but not actively tracked to resolution.
- There is no visibility into overdue remediation across units.
Key capabilities
- Severity and root-cause fields with configurable due dates
- Owner assignment and evidence-of-remediation upload
- Verification and closure workflow, distinct from the original finding
Example workflow
- 1A control test fails and a finding is logged against the responsible unit.
- 2The unit submits remediation evidence; the auditor verifies and closes the finding.
Who uses this
Audit ReviewerUnit HeadRisk/Control Owner
Security and audit considerations
Every action within this capability writes to the platform's append-only audit log — actor, action type, timestamp, and before/after state — independent of the business record. See Security & Trust for the full model.