Findings, fixes, and evidence in one closed loop.

Findings are the issue of record. They open automatically from the places problems actually surface, so nothing lives in a side spreadsheet.

• 01Findings are created automatically from control drift, monitoring & testing failures, exam requests, and internal-audit engagements.
• 02Anyone can self-identify a finding, and it enters the same governed queue.
• 03Each finding carries its citation from Citations & Authorities.

Severity, owner, and due date are first-class fields, and changing one takes a reason that lands in the audit trail.

• 01Severity and SLA drive routing and escalation (finding_sla).
• 02Ownership and state transitions are governed (finding_governance).

Remediation lives as tasks and action plans linked to the finding (tasks), so the fix and the issue never drift apart.

• 01Action plans break a finding into owned, dated steps.
• 02Progress rolls up to the finding’s state.

Apart from an examiner observation, a finding cannot close without remediation evidence. High/Critical and examiner-source findings also need a root cause, and an examiner MRA, MRIA, or violation also needs a corrective action plan. An examiner observation closes on the independent sign-off and its rationale alone, with no evidence, plan, or root cause required. After that, the finding exports audit-ready.

• 01Close is blocked without remediation evidence, whatever the severity, for every source except an examiner observation.
• 02An examiner finding records its supervisory basis, an unsafe or unsound practice or a violation of law with the law cited, and the date the communication was issued.
• 03An MRA or MRIA issued on or after November 2, 2026, when the OCC and FDIC rule on matters requiring attention takes effect, must record its basis, so findings from before and after the rule can be told apart.
• 04Root cause and management responses are captured on the finding (root_cause, management_responses).
• 05One-click export packages the finding, its citation, and its evidence trail (report_exports).