ClearPenTest

Findings and risk

Remediation

Also called: fixing findings, corrective action

Remediation is the work of fixing a finding, as distinct from acknowledging it. In an audit context it also means the documented record of who fixed what, when, and how it was verified.

START WITH A CLEAR SCOPE

Testing, with the report an auditor can actually use

Scope an assessment