Findings

Closure evidence

What would demonstrate a finding is closed, so closure is a stated test rather than an assertion that the work was done.

Currentengine 9.0.0Verified 2026-08-30

What it is

A short statement of what would show the control now passes.

Why it is included

Because "fixed" is a claim, and a claim is what a governance assessment exists to replace. A finding with a stated closure test can be checked by somebody who was not involved in fixing it.

The strongest closure test

The next assessment. A control that failed before, was evaluated again, and now passes is reported as closed.

A control that failed before and was not evaluated is reported as not re-assessed, which is explicitly not closure. That distinction is what stops a lost permission being reported as progress.

How GovIntel applies it

Carried per control in the Evidence Register, with the governance implication and the first action. That register is produced with every successful assessment and is available on request.

What it does not mean

Closure evidence is not a compliance artefact and does not satisfy any external framework.