An organization should use results from ongoing monitoring and periodic evaluations to remediate and continuously improve the program. If deficiencies are detected, management should ensure that improvements are made without delay. Follow-up activities should include verification that corrective action has been taken.
Principles
> Prompt implementation of change
> Changes documented for future defense
> Verify that recommendations were addressed
> Root cause
Business Objectives
-
To ensure that the program is continuously improved
Considerations
-
Opportunities for improvement in operations may be identified, beyond those necessary to achieve compliance with legal requirements or entity values
-
Organizations should name a point-of-contact who is accountable for ensuring that remediation and improvement opportunities are prioritized and addressed
Critical Success Factors
-
Follow up to ensure improvements are in place