Remediation tasks for a failed control are marked complete. What additional lifecycle step restores confidence that the control is effective?
Select an answer to reveal the explanation.
Short Explanation
Closing the ticket isn’t the same as proving the fix. Retest after remediation—show the control works now. Otherwise “effective” is just a hopeful status flip.
Full Explanation
Issue and remediation closure alone do not re-establish control effectiveness. The Policy and Compliance lifecycle expects verification—typically a retest or comparable evidence—after remediation before returning the control to an effective posture. Deleting failed-test history or status-flipping without verification weakens the evidence chain.