Review Findings & Gaps

This guide explains how to triage, investigate, and manage deficiencies in the Findings Register (/findings).

---

Step 1: Triaging a Finding

1. Navigate to Risk Management > Findings Register (/findings).
2. Click on an Open finding (FND-YYYY-NNNN) to view its slide-over drawer.
3. Review:
   • Source Activity: The audit, assessment, or test that triggered the finding.
   • Severity & Impact: Severity rating (Critical, High, Medium, Low).
   • Root Cause Analysis: Documented failure mode.

---

Step 2: Assigning Remediation & Action Plans

1. Within the finding drawer, navigate to the Remediation & Actions section.
2. Click + Create Action Plan to generate a linked remediation project (ACT-YYYY-NNNN).
3. Set the Remediation Owner and target Commitment Date.
4. Once created, track progress through milestones until the owner submits completion evidence for verification.