Responding to a Finding: Writing and Submitting Mitigation Plans

When a Finding is created and Published, as the allocated Finding Owner (Primary Contact) or an associated owner, you will receive an email notification with a link to the Finding for review and the provision of a Mitigation plan.

1. Click on the link in the email and sign in and you will be automatically redirected to the Finding record.

2. At the bottom, center of the screen, click on ‘Add New’ in the Risk Mitigation Section. Note, you can see the following information to help guide your Mitigation plan (Section 4):

1. Finding Source

2. Due Date

3. Days open

4. Priority level

5. Related Assets

6. Finding Description

7. Any provided Recommendations

8. Risk Treatment (will always read ‘Mitigate’)

9. Risk Manager

3. In the Risk Mitigation Plan, populate all open fields:

1. Action Plan: How you plan to mitigate the Finding

2. Completion Date: Should be on or before the due date (highlighted) of the Finding*

3. Attachments: Add any supporting documentation

4. Approval: Choose approval required if the completion date extends beyond the due date

4. Click Save to notify the Risk Manager that you have submitted a Risk Mitigation plan for review.

5. Once you have submitted the Mitigation, note you may return to it at any time and edit/update your submission.

6. You may also add additional Mitigation plans, however, this will decommission and auto-archive your previous plan. As such, if you want to add to your existing plan, choose the ‘Edit’ option. If you want to start-over with a completely new plan, choose ‘Add Mitigation Plan’.

NOTE: At this point in time, the Mitigation plan may not be fully implemented. Once the Mitigation plan is complete, please return to Finding to complete your Mitigation task. 

7. Once you have resolved the Finding or to add an additional Mitigation Plan, return to the Finding and select ‘Resolve’ or ‘Add Risk Mitigation’.