Action Plans
Only agreed or reported findings get an action plan. Whether a plan truly addresses the root cause is the auditor's call (Reviewer Assessment) — completeness chips only check owner/due date.
Changes deployed without prior approval
2 of 10 sampled changes (CHG-1002, CHG-1003) were implemented before formal approval was recorded, or without any approval evidence at all.Configure the change management tool to block the 'Implemented' transition unless an approval record exists with a timestamp earlier than implementation.
History
Pending Validation → Closed
Bruno · 2026-04-29 00:00In Progress → Pending Validation
IT Change Manager · 2026-04-22 00:00Approved → In Progress
IT Change Manager · 2026-03-20 00:00Proposed → Approved
Bruno · 2026-03-12 00:00Comments
Enforcement rule deployed to production. Ran 5 test changes through the new gate — all behaved as expected.
Missing test evidence for a production change
1 of 10 sampled changes (CHG-2003) had no test evidence attached to the change record.Make the test-evidence attachment field mandatory in the change ticket template.
History
In Progress → Pending Validation
Bruno · 2026-07-25 00:00Pending Validation → In Progress
Bruno · 2026-07-25 00:00Comments