Issues lifecycle
Findings
Every potential problem from testing, walkthroughs, monitoring, audits, external auditors and management. Complify drafts the finding and recommends a disposition; a human decides whether it is a deficiency.
Needs attention
My work
Lifecycle tasks routed into your Complify work queue
- Deficiency review required — DEF-2026-006 classificationToday
- Closure approval required — REM-029 ready for retestToday
- Finding evaluation due — F-2026-014Sep 20
- Management response requested — F-2026-014Sep 20
- Remediation overdue — REM-025 channel rebates13 days late
- Evidence requested — REM-026 training recordsNov 5
Findings (7)
Click a finding to open its evaluation workspace
| Finding | Source | Process | Control | Risk | Owner | Severity | Status | Potential deficiency | Mgmt response | Remediation | Due | Age | Updated |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| TOE Testing | Procure to Pay | P2P-008 | R-07 | Procurement Controller | High | Under evaluation | Yes | Pending | REM-026 | Oct 15, FY26 | 12d | 2 hrs ago | |
| Continuous Monitoring | Revenue to Cash | R2C-014FCR-003 | R-01 | Director, Revenue Accounting | High | Awaiting management response | Yes | Pending | REM-031 | Oct 31, FY26 | 20d | 12 min ago | |
| TOE Testing | ITGC — Access | ITGC-017 | R-04 | IT Operations Lead | Medium | Under evaluation | Yes | Received | REM-029 | Nov 30, FY26 | 17d | 42 min ago | |
| Internal Audit | ITGC — Access | ITGC-004 | R-04 | CIO | High | Evaluated | Yes | Received | REM-030 | Jan 31, FY27 | 37d | Yesterday | |
| Internal Audit | Supply chain | OPS-021 | R-09 | VP Supply Chain | Medium | Awaiting management response | No | Received | REM-028 | Dec 15, FY26 | 45d | 3 days ago | |
| Walkthrough | Procure to Pay | P2P-008 | R-07 | Procurement Controller | Low | Evaluated | No | Received | REM-027 | Nov 15, FY26 | 58d | 1 wk ago | |
| TOE Testing | Treasury | TR-006 | R-06 | Treasurer | Medium | Closed | Yes | Received | RM-401 | Aug 31, FY26 | 0d | Aug 31 |
Root cause analytics
Findings, deficiencies and average remediation time by cause
| Root cause | Findings | Deficiencies | Avg. days to remediate | Repeats |
|---|---|---|---|---|
| System Configuration | 2 | 1 | 74 | 1 repeat |
| Change Management | 1 | 2 | 61 | — |
| Access | 1 | 1 | 48 | 1 repeat |
| Segregation of Duties | 1 | 1 | 135 | — |
| Insufficient Documentation | 2 | 2 | 39 | — |
| Governance | 1 | 0 | 92 | — |
| Resource Constraints | 1 | 0 | 106 | 1 repeat |
Recurring controls, processes and owners
- Control P2P-008 — Vendor master maintenance3 findings in 2 years
- Process Procure to PayHighest finding density
- Control ITGC-017 — Termination accessRepeat of FY25 finding
- Owner GM Asia Pacific2 overdue remediation actions
Overdue remediation by owner
- GM Asia Pacific2 overdue13 days
- ERP Security1 overdue4 days
- Controller0 overdue—
Ask Complify — management reporting
Every summary links back to the underlying records