A municipal critical finding is fixed mid-engagement and the tester is asked to verify. How should the report treat that work?
Select an answer to reveal the explanation.
Short Explanation
If they patch mid-test and you recheck, say so. Show what was wrong, what changed, and whether the fix held—credit where it is due without erasing history.
Full Explanation
Retest verification during an engagement should be recorded: initial evidence, remediation timing, and verification outcome. That practice demonstrates value and prevents silent disappearance of material issues. Keeping historical context helps auditors and future testing. Unverified claims of fixes should be labeled as such.