Flagship course
Finding to Closure
A six-module programme for configuring and running an audit issue tracking app so every finding has an owner, an evidence trail, and a defensible close.
Learning outcomes
- Design intake fields that capture control references without bloating forms
- Assign a single remediation owner and a reviewing role that cannot be the same person
- Build evidence packs reviewers can navigate without a call
- Write closure criteria before work starts, then verify them in-record
- Produce a board-facing summary view that matches the live register
Who it suits
Internal auditors, SOX or ISO programme leads, GRC analysts, and operations owners who update remediation status. Teams should have access to edit workflows in their audit issue tracking app — view-only access limits practice exercises.
Modules
-
Register archaeology
Export and critique your current open items. Identify duplicates, orphan owners, and severity inflation.
-
Intake that sticks
Field design, required vs optional data, and how to stop “misc” categories from taking over.
-
Evidence Pack Studio
Attachment hygiene, comment conventions, and linking source systems without pasting screenshots forever.
-
Remediation ownership
RACI that fits a ticket, escalation timers, and what happens when the owner leaves mid-fix.
-
Closure criteria & verification
Write acceptance tests for findings; run a blind review using only the tracker record.
-
Reporting without two truths
Align dashboard exports with live status so board packs stop contradicting the app.
Instructor
Priya Lang
Former internal audit manager and GRC implementer. Priya has led tracker rollouts for UK manufacturers and regulated financial firms, with a focus on remediation discipline rather than tool features alone.
Informational pricing
Individual Desk Seat access is listed at £480. Team Control Room seating (five learners) is £2,150. There is no checkout on this site — contact us to reserve a place. Full tier details are on Pricing.
FAQ
Do you teach a specific vendor’s audit issue tracking app?
We stay vendor-neutral. Exercises use patterns that transfer across common GRC and issue trackers. If your UI labels differ, facilitators help you map concepts during clinics.
Can we use our live findings as coursework?
Yes, and we prefer it — with redaction rules you set. Public screenshots of confidential findings are never required.
What is a real limitation of this course?
Finding to Closure does not replace a full GRC platform implementation project. If your organisation still needs data migration, SSO design, or custom integrations, you will need separate technical delivery. We will say so early rather than stretch the syllabus.
How long does the programme take?
Most cohorts finish in five to seven weeks at three to four hours per week, plus optional clinics.
Reviews from this course
“Module three’s evidence rules cut our ‘please resend attachment’ emails roughly in half during the next SOX cycle.”
Priya was sharp on ownership. The reporting module felt rushed for our multi-entity setup — we booked a follow-up clinic.