Findings and risk
Remediation
Also called: fixing findings, corrective action
Remediation is the work of fixing a finding, as distinct from acknowledging it. In an audit context it also means the documented record of who fixed what, when, and how it was verified.
See also
Testing, with the report an auditor can actually use
A fixed price, a date, and a report that states scope, method and closure. No discovery call required to get a number.