02 — Capability · BC-160.30
Findings & Remediation Tracking
Track every audit finding to a management action with an owner and a date, verify the fix, and escalate what stays open — because a finding closed by the passage of time is not closed.
- Issue Tracking
- Management Action Follow-Up
- Audit Remediation
In scope
- Finding register and severity ratings
- Management action plans and due dates
- Validation of completed actions and escalation of overdue ones
Out of scope
- Fixing the finding itself (owned by the auditee)
- Compliance issue remediation (see BC-140)
Realized by · 0
- No product in the catalog yet.
Used in · 1
Build it · 0
- Nothing in the library points here yet.
Decomposes into · 4
- BC-160.30.10Finding RegisterMaintain the single list of open and closed findings with ratings, owners, dates and status.
- BC-160.30.20Management Action PlanningAgree with management what will be done about each finding, by whom and by when.
- BC-160.30.30Remediation ValidationTest that a completed action actually addressed the finding before marking it closed.
- BC-160.30.40Overdue Finding EscalationReport actions past their date to executives and the audit committee until they are done or formally re-planned.