Finding Tracking

The Findings Tracking page in CyberGuard.ai (titled Follow-ups in the interface) serves as a centralized workspace for recording, monitoring, and managing security and compliance findings. It helps organizations maintain visibility into open issues identified during audits, assessments, or risk evaluations β€” ensuring timely remediation and continuous improvement of cybersecurity posture.

This page acts as a follow-up mechanism, bridging the gap between identified weaknesses and corrective actions.


Usage Notes

  1. Findings Overview

    • Each record represents a finding or follow-up item tied to a specific assessment, audit, or control review.

    • The list displays key details such as Reference ID, Name, Description, Category, Findings, and Perimeter.

    • The Search and Filters tools enable users to quickly locate findings by severity, type, or associated domain.

  2. Tracking and Status Management

    • Each finding can be categorized and linked to a specific audit, risk assessment, or exception.

    • Users can update statuses as findings move from Open to In Progress, Resolved, or Closed, ensuring accurate tracking of remediation progress.

  3. Accountability and Follow-ups

    • Findings can be assigned to responsible team members for remediation or further investigation.

    • The system provides traceability, showing how each finding is addressed, documented, and validated during subsequent reviews.

  4. Integration with Governance Components

    • Findings often originate from Policies, Risk Assessments, or Audits, linking governance and operational processes.

    • This integration ensures that remediation efforts are aligned with organizational standards and regulatory compliance.


Benefits

  • Centralizes management of all audit and assessment findings.

  • Ensures accountability through assignment and progress tracking.

  • Promotes timely remediation of vulnerabilities and compliance gaps.

  • Improves transparency and readiness for internal or external audits.

  • Strengthens the feedback loop between governance and operations.


  • Policies – Defines the governance rules and control requirements that findings may relate to.

  • Risk Acceptances – Records decisions to accept findings that cannot be mitigated immediately.

  • Exceptions – Tracks approved deviations linked to unresolved findings.

  • X-rays – Provides insights into compliance and control health that may generate findings.

Last updated