Corrective Actions
Objective
Track remediation measures following audit findings.
Action Structure
Each corrective action includes:
- Action ID
- Related Finding ID
- Description
- Responsible Component
- Target Completion Status
- Current Status
Example
Action ID: CA-01 Related Finding: F-01 Description: Configure SSH failed login alert Component: Logging System Status: In Progress
Review Process
Corrective actions are reviewed:
- During next audit simulation
- After significant infrastructure changes
Closed actions require validation evidence.