Display Referenced Findings in Actions for Business Users

What is the challenge?

Business users are granted access only to actions assigned to them for remediation purposes and do not have permission to access audit findings directly. Whilst this aligns with the intended security model, it can leave action owners with limited context regarding the issue they are being asked to remediate.

Users often need to understand key information about the originating finding, such as the nature of the observation, who is responsible, etc, but are unable to see this information.

What is the impact?

• Action owners lack sufficient context to understand why remediation work is required.

• Increased reliance on auditors and administrators to provide supplementary information.

• Delays in remediation activities while users seek clarification.

• Reduced ownership and accountability for corrective actions.

• A disconnected user experience where related information exists within the system but is not visible to the individuals responsible for resolving it.

Describe your idea

Provide the ability for business users to view selected information from the finding associated with an assigned remediation action, without granting access to the finding record itself.

The action record could display a read-only "Referenced Finding" section containing data such as:

• Finding Title

• Finding Reference Number

• Finding Owner

• Audit/Engagement Name

• Location, Process

• Finding Status

• Finding Resolution

This information should be surfaced directly on the action record and clearly identified as a reference to the originating finding. Users would not be able to open, edit, or navigate to the finding itself as identified in the Business User licensing structure.