Remediation and re-testing
We re-test closed items and say plainly whether the original exception still exists.
Closing a finding on a tracker is not the same as fixing the application. Remediation work re-performs the original test, or an updated version of it, against the current configuration and a fresh period.
We will not mark an item closed because a procedure was rewritten. We mark it closed when the evidence shows the break no longer occurs, or when the residual risk has been accepted in writing by the accountable owner.
This service is available after our own audits and, where the original papers are adequate, after another reviewer’s work.