Where they come from
Source | How |
|---|---|
A test | Raised from a test completed below the fail line, or by the tester for a result between the lines. See Complete a test. |
By hand | From an internal or external audit, a regulator, an incident or near miss, a business process run, or anything else. See Raise a finding by hand. |
What a finding carries
A reference (for example
FND-0014) and a title.The unit it's about (always), and the control (where there is one).
Its source.
A severity, and a fix-by date from it. See Severity and fix-by dates.
An owner, once someone takes it on.
Its actions, notes, photos and files, and its history.
Its life
A new finding starts un-owned, in the Findings Back-Log.
It's moved on (for example into remediation), and an owner is picked.
Actions are added and worked.
A retest checks the fix worked.
A closed finding never re-opens. If the problem comes back, that's a new finding.
Possibly related
Conform shows other findings on the same control raised around the same time as possibly related, so you can spot a shared cause. It's for information only.
Warned, never blocked
An open finding is flagged on its unit, but it doesn't stop the unit's assessment being finished. Conform makes it visible rather than getting in the way.