Who this is for: Needs the Verify & Close Findings permission (Audit Manager and Audit Administrator by default).
When closure verification is required for a finding type, the finding does not close as soon as its corrective actions are done. Someone independent first confirms the actions actually worked. Your administrator sets which finding types need this — see 10.5.
How it works
Every corrective action on the finding is marked Completed.
The finding moves to For Closure, and holders of Verify & Close Findings are notified.
A verifier opens the finding and selects Verify & Close.
They review each corrective action and its completion detail.
Under Review Effectiveness, they record what they checked and what it showed.
Optionally, they set a Monitoring date. The finding then stays at For Closure until that date, so you can confirm the fix has held.
They close the finding. The verifier and date are recorded.
Who can verify
Anyone with Verify & Close Findings in the finding's location, or in a location above it.
Never the owner of one of the finding's corrective actions. This rule cannot be switched off.
If your organisation has switched on The auditor may not close their own findings, not the auditor either.
If the audit's Closure Verification field on Audit Details is set to Specific users, only the people named there.
If the fix has not worked
Do not close it. Add a new corrective action, or edit an existing one. The finding goes back to Open and returns to For Closure when the new work is Completed.
Verify the outcome, not the paperwork. A corrective action marked Completed means someone says they did it. Verification means someone checked that the problem is actually gone — a different question, and the reason the step exists.
Related: 10.5 Configuring closure verification by finding type · 7.11 Adding several corrective actions, and containment vs corrective
