Track mitigation actions to closure

Risk Assessment policy, §7

Each assessment ends with the actions needed to bring residual risk to an acceptable level, each with an owner and a date. Actions are tracked to closure, reported quarterly, and escalated when they miss their date.

Quarterly

Status with each quarterly compliance report; escalation on a missed date

Keep the mitigation list with owner, date, and status; report it quarterly; open an issue for any action that slips.

• Mitigation tracker

  Action, owner, due date, status, closure evidence

Compliance Officer

Leela can keep each action on its date and flag the ones that slip.

Tell Leela about your company to see whether this applies.