)]}'
{"security-guide/source/compliance/understanding-the-audit-process.rst":[{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"5f454b5e3b1e81e3bea2645490ab8df3a38fa7d4","unresolved":false,"context_lines":[{"line_number":79,"context_line":"Fieldwork begins.  In this phase audit items such as the timeframe, timeline,"},{"line_number":80,"context_line":"controls to be evaluated, and control owners are discussed and finalized."},{"line_number":81,"context_line":"Concerns about resource availability, impartiality, and costs are also"},{"line_number":82,"context_line":"discussed and resolved."},{"line_number":83,"context_line":""},{"line_number":84,"context_line":"The Fieldwork phase is what most people would consider \"the audit\".  This is"},{"line_number":85,"context_line":"where the auditors are onsite, interviewing the control owners, documenting"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7aa08908_25a81977","line":82,"range":{"start_line":82,"start_character":0,"end_line":82,"end_character":9},"updated":"2016-06-16 22:08:25.000000000","message":"The \"...and ... and...\" just rubs me the wrong way - maybe just \"are also resolved.\"?","commit_id":"c62b7e49ac3af515be88fbcdc683f347d3e3e84f"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"5f454b5e3b1e81e3bea2645490ab8df3a38fa7d4","unresolved":false,"context_lines":[{"line_number":81,"context_line":"Concerns about resource availability, impartiality, and costs are also"},{"line_number":82,"context_line":"discussed and resolved."},{"line_number":83,"context_line":""},{"line_number":84,"context_line":"The Fieldwork phase is what most people would consider \"the audit\".  This is"},{"line_number":85,"context_line":"where the auditors are onsite, interviewing the control owners, documenting"},{"line_number":86,"context_line":"the controls that are in place, and identifying any issues.  It is important"},{"line_number":87,"context_line":"to note that the auditors will use a two part process for evaluating the"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7aa08908_a5b249e3","line":84,"range":{"start_line":84,"start_character":23,"end_line":84,"end_character":27},"updated":"2016-06-16 22:08:25.000000000","message":"\"...is the most visible portion of \u0027the audit\u0027.\"?","commit_id":"c62b7e49ac3af515be88fbcdc683f347d3e3e84f"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"5f454b5e3b1e81e3bea2645490ab8df3a38fa7d4","unresolved":false,"context_lines":[{"line_number":91,"context_line":"deficiencies.  A control must \"pass\" this test to be evaluated in the second"},{"line_number":92,"context_line":"phase.  This is because with a control that is designed ineffectually, there"},{"line_number":93,"context_line":"is no point considering whether it is operating effectively. The second part"},{"line_number":94,"context_line":"is operational effectiveness. Operational Effectiveness testing will determine"},{"line_number":95,"context_line":"how the control was applied, the consistency with which the control was"},{"line_number":96,"context_line":"applied and by whom or by what means the control was applied.  A control may"},{"line_number":97,"context_line":"depend upon other controls (indirect controls) and, if they do, additional"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7aa08908_25d659f1","line":94,"range":{"start_line":94,"start_character":42,"end_line":94,"end_character":55},"updated":"2016-06-16 22:08:25.000000000","message":"This \u0027Effectiveness\u0027 is capitalized while the other is not. Should this be lowercase? Or should the previous mention be capitalized?","commit_id":"c62b7e49ac3af515be88fbcdc683f347d3e3e84f"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"5f454b5e3b1e81e3bea2645490ab8df3a38fa7d4","unresolved":false,"context_lines":[{"line_number":99,"context_line":"controls may be required for the auditor to determine the overall operating"},{"line_number":100,"context_line":"effectiveness of the control."},{"line_number":101,"context_line":""},{"line_number":102,"context_line":"The Reporting Phase is where any issues that were identified during the"},{"line_number":103,"context_line":"Fieldwork phase will be validated by management as factual.  For logistics"},{"line_number":104,"context_line":"purposes, some activities such as issue validation may be performed during the"},{"line_number":105,"context_line":"Fieldwork phase.  Management will also need to provide remediation plans to"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7aa08908_652d01fd","line":102,"range":{"start_line":102,"start_character":14,"end_line":102,"end_character":19},"updated":"2016-06-16 22:08:25.000000000","message":"This is the only time Phase is capitalized - should this be lowercase?","commit_id":"c62b7e49ac3af515be88fbcdc683f347d3e3e84f"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"5f454b5e3b1e81e3bea2645490ab8df3a38fa7d4","unresolved":false,"context_lines":[{"line_number":103,"context_line":"Fieldwork phase will be validated by management as factual.  For logistics"},{"line_number":104,"context_line":"purposes, some activities such as issue validation may be performed during the"},{"line_number":105,"context_line":"Fieldwork phase.  Management will also need to provide remediation plans to"},{"line_number":106,"context_line":"remediate the issues and ensure that they do not reoccur.  A draft of the"},{"line_number":107,"context_line":"overall report will be circulated for review to the stakeholders and"},{"line_number":108,"context_line":"management.  Agreed upon changes are incorporated and the updated draft is"},{"line_number":109,"context_line":"sent to senior management for review and approval.  Once senior management"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7aa08908_0526bd15","line":106,"range":{"start_line":106,"start_character":0,"end_line":106,"end_character":9},"updated":"2016-06-16 22:08:25.000000000","message":"not a fan of \"remediation ... remediate\". Maybe change the second to \"fix\" or something similar?","commit_id":"c62b7e49ac3af515be88fbcdc683f347d3e3e84f"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"5f454b5e3b1e81e3bea2645490ab8df3a38fa7d4","unresolved":false,"context_lines":[{"line_number":107,"context_line":"overall report will be circulated for review to the stakeholders and"},{"line_number":108,"context_line":"management.  Agreed upon changes are incorporated and the updated draft is"},{"line_number":109,"context_line":"sent to senior management for review and approval.  Once senior management"},{"line_number":110,"context_line":"approves the report, it is finalized and distributed to Executive Management."},{"line_number":111,"context_line":"Any issues are entered into the issue tracking or risk tracking mechanism the"},{"line_number":112,"context_line":"organization uses."},{"line_number":113,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7aa08908_45e565a6","line":110,"range":{"start_line":110,"start_character":56,"end_line":110,"end_character":65},"updated":"2016-06-16 22:08:25.000000000","message":"So senior management is not capitalized, should executive management be?","commit_id":"c62b7e49ac3af515be88fbcdc683f347d3e3e84f"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"5f454b5e3b1e81e3bea2645490ab8df3a38fa7d4","unresolved":false,"context_lines":[{"line_number":111,"context_line":"Any issues are entered into the issue tracking or risk tracking mechanism the"},{"line_number":112,"context_line":"organization uses."},{"line_number":113,"context_line":""},{"line_number":114,"context_line":"The Wrap-up phase is where the audit is officialy spun down.  Management will"},{"line_number":115,"context_line":"begin remediation activities at this point. Processes and notifications are"},{"line_number":116,"context_line":"used to ensure that any audit related information is moved to a secure"},{"line_number":117,"context_line":"repository."}],"source_content_type":"text/x-rst","patch_set":1,"id":"7aa08908_65918146","line":114,"range":{"start_line":114,"start_character":40,"end_line":114,"end_character":49},"updated":"2016-06-16 22:08:25.000000000","message":"officially","commit_id":"c62b7e49ac3af515be88fbcdc683f347d3e3e84f"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"5f454b5e3b1e81e3bea2645490ab8df3a38fa7d4","unresolved":false,"context_lines":[{"line_number":121,"context_line":"~~~~~~~~~~~~~~"},{"line_number":122,"context_line":""},{"line_number":123,"context_line":"Once a cloud is deployed, it is time for an internal audit. This is the"},{"line_number":124,"context_line":"time compare the controls you identified above with the design,"},{"line_number":125,"context_line":"features, and deployment strategies utilized in your cloud. The goal is"},{"line_number":126,"context_line":"to understand how each control is handled and where gaps exist. Document"},{"line_number":127,"context_line":"all of the findings for future reference."}],"source_content_type":"text/x-rst","patch_set":1,"id":"7aa08908_c59e7506","line":124,"range":{"start_line":124,"start_character":30,"end_line":124,"end_character":40},"updated":"2016-06-16 22:08:25.000000000","message":"While I agree this is needed, we normally refrain from \"drive-by\" requests like this and stick to the portion that has been contributed. Mike - it\u0027s up to you if you\u0027d like to fix this, or we can open a bug.","commit_id":"c62b7e49ac3af515be88fbcdc683f347d3e3e84f"},{"author":{"_account_id":14379,"name":"Ning Sun","email":"ning.sun@intel.com","username":"nsun"},"change_message_id":"0beb1dde21281088f63e321ab90a5513614c4b3a","unresolved":false,"context_lines":[{"line_number":121,"context_line":"~~~~~~~~~~~~~~"},{"line_number":122,"context_line":""},{"line_number":123,"context_line":"Once a cloud is deployed, it is time for an internal audit. This is the"},{"line_number":124,"context_line":"time compare the controls you identified above with the design,"},{"line_number":125,"context_line":"features, and deployment strategies utilized in your cloud. The goal is"},{"line_number":126,"context_line":"to understand how each control is handled and where gaps exist. Document"},{"line_number":127,"context_line":"all of the findings for future reference."}],"source_content_type":"text/x-rst","patch_set":1,"id":"7aa08908_f4940945","line":124,"updated":"2016-06-16 20:44:41.000000000","message":"to","commit_id":"c62b7e49ac3af515be88fbcdc683f347d3e3e84f"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ae624c221c088649580554c91b4d71415ee4f2f6","unresolved":false,"context_lines":[{"line_number":68,"context_line":"problem areas within control sets for particular compliance"},{"line_number":69,"context_line":"certifications and attestations."},{"line_number":70,"context_line":""},{"line_number":71,"context_line":"Phases of an audit ~~~~~~~~~~~~~~~~~~"},{"line_number":72,"context_line":""},{"line_number":73,"context_line":"An audit has four distinct phases, though most stakeholders and control owners"},{"line_number":74,"context_line":"will only participate in one or two.  The four phases are Planning, Fieldwork,"}],"source_content_type":"text/x-rst","patch_set":2,"id":"3aaa91ec_fdf6bef7","line":71,"range":{"start_line":71,"start_character":19,"end_line":71,"end_character":37},"updated":"2016-06-22 22:39:14.000000000","message":"the ~\u0027s should be on their own line","commit_id":"a22bcf39b78b5e84b20c81176578ef92d08b50b1"},{"author":{"_account_id":15515,"name":"Charles Neill","email":"charles.neill@rackspace.com","username":"cneill"},"change_message_id":"cb16353c3ae4d30b47c76c92f4b5e9107afbcd69","unresolved":false,"context_lines":[{"line_number":74,"context_line":"will only participate in one or two.  The four phases are Planning, Fieldwork,"},{"line_number":75,"context_line":"Reporting and Wrap-up.  Each of these phases is discussed below."},{"line_number":76,"context_line":""},{"line_number":77,"context_line":"The Planning phase is typically performed two weeks to six months before"},{"line_number":78,"context_line":"Fieldwork begins.  In this phase audit items such as the timeframe, timeline,"},{"line_number":79,"context_line":"controls to be evaluated, and control owners are discussed and finalized."},{"line_number":80,"context_line":"Concerns about resource availability, impartiality, and costs are also"}],"source_content_type":"text/x-rst","patch_set":2,"id":"3aaa91ec_97ae4396","line":77,"range":{"start_line":77,"start_character":0,"end_line":77,"end_character":18},"updated":"2016-06-23 17:28:53.000000000","message":"Maybe bold the names of the phases to make it easier to skim?","commit_id":"a22bcf39b78b5e84b20c81176578ef92d08b50b1"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ae624c221c088649580554c91b4d71415ee4f2f6","unresolved":false,"context_lines":[{"line_number":80,"context_line":"Concerns about resource availability, impartiality, and costs are also"},{"line_number":81,"context_line":"resolved."},{"line_number":82,"context_line":""},{"line_number":83,"context_line":"The Fieldwork phase is the most visiblle portion of the audit.  This is where"},{"line_number":84,"context_line":"the auditors are onsite, interviewing the control owners, documenting the"},{"line_number":85,"context_line":"controls that are in place, and identifying any issues.  It is important to"},{"line_number":86,"context_line":"note that the auditors will use a two part process for evaluating the controls"}],"source_content_type":"text/x-rst","patch_set":2,"id":"3aaa91ec_1df46af0","line":83,"range":{"start_line":83,"start_character":32,"end_line":83,"end_character":40},"updated":"2016-06-22 22:39:14.000000000","message":"I believe this is a typo - visible","commit_id":"a22bcf39b78b5e84b20c81176578ef92d08b50b1"},{"author":{"_account_id":15515,"name":"Charles Neill","email":"charles.neill@rackspace.com","username":"cneill"},"change_message_id":"cb16353c3ae4d30b47c76c92f4b5e9107afbcd69","unresolved":false,"context_lines":[{"line_number":99,"context_line":"effectiveness of the control."},{"line_number":100,"context_line":""},{"line_number":101,"context_line":"The Reporting phase is where any issues that were identified during the"},{"line_number":102,"context_line":"Fieldwork phase will be validated by management as factual.  For logistics"},{"line_number":103,"context_line":"purposes, some activities such as issue validation may be performed during the"},{"line_number":104,"context_line":"Fieldwork phase.  Management will also need to provide remediation plans to"},{"line_number":105,"context_line":"address the issues and ensure that they do not reoccur.  A draft of the"}],"source_content_type":"text/x-rst","patch_set":2,"id":"3aaa91ec_b7fc1f73","line":102,"range":{"start_line":102,"start_character":48,"end_line":102,"end_character":58},"updated":"2016-06-23 17:28:53.000000000","message":"Unnecessary?","commit_id":"a22bcf39b78b5e84b20c81176578ef92d08b50b1"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ae624c221c088649580554c91b4d71415ee4f2f6","unresolved":false,"context_lines":[{"line_number":106,"context_line":"overall report will be circulated for review to the stakeholders and"},{"line_number":107,"context_line":"management.  Agreed upon changes are incorporated and the updated draft is"},{"line_number":108,"context_line":"sent to senior management for review and approval.  Once senior management"},{"line_number":109,"context_line":"approves the report, it is finalized and distributed to executive Management."},{"line_number":110,"context_line":"Any issues are entered into the issue tracking or risk tracking mechanism the"},{"line_number":111,"context_line":"organization uses."},{"line_number":112,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"3aaa91ec_7d8c8e7f","line":109,"range":{"start_line":109,"start_character":66,"end_line":109,"end_character":76},"updated":"2016-06-22 22:39:14.000000000","message":"Thanks for taking care of executive, however Management is only capitalized here again.","commit_id":"a22bcf39b78b5e84b20c81176578ef92d08b50b1"},{"author":{"_account_id":10497,"name":"KATO Tomoyuki","email":"kato.tomoyuki@jp.fujitsu.com","username":"to222"},"change_message_id":"90038451ff5aac801abd7e95c4ffb5f1f8e80963","unresolved":false,"context_lines":[{"line_number":73,"context_line":""},{"line_number":74,"context_line":"An audit has four distinct phases, though most stakeholders and control owners"},{"line_number":75,"context_line":"will only participate in one or two.  The four phases are Planning, Fieldwork,"},{"line_number":76,"context_line":"Reporting and Wrap-up.  Each of these phases is discussed below."},{"line_number":77,"context_line":""},{"line_number":78,"context_line":"The Planning phase is typically performed two weeks to six months before"},{"line_number":79,"context_line":"Fieldwork begins.  In this phase audit items such as the timeframe, timeline,"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3aaa91ec_03a7a40b","line":76,"range":{"start_line":76,"start_character":22,"end_line":76,"end_character":24},"updated":"2016-06-29 22:20:12.000000000","message":"one white space","commit_id":"fa47ad115143ced0ac878f3586cc37b92ffee288"},{"author":{"_account_id":10497,"name":"KATO Tomoyuki","email":"kato.tomoyuki@jp.fujitsu.com","username":"to222"},"change_message_id":"90038451ff5aac801abd7e95c4ffb5f1f8e80963","unresolved":false,"context_lines":[{"line_number":72,"context_line":"~~~~~~~~~~~~~~~~~~"},{"line_number":73,"context_line":""},{"line_number":74,"context_line":"An audit has four distinct phases, though most stakeholders and control owners"},{"line_number":75,"context_line":"will only participate in one or two.  The four phases are Planning, Fieldwork,"},{"line_number":76,"context_line":"Reporting and Wrap-up.  Each of these phases is discussed below."},{"line_number":77,"context_line":""},{"line_number":78,"context_line":"The Planning phase is typically performed two weeks to six months before"},{"line_number":79,"context_line":"Fieldwork begins.  In this phase audit items such as the timeframe, timeline,"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3aaa91ec_23a2a0fc","line":76,"range":{"start_line":75,"start_character":58,"end_line":76,"end_character":21},"updated":"2016-06-29 22:20:12.000000000","message":"planning, fieldwork, reporting and wrap-up","commit_id":"fa47ad115143ced0ac878f3586cc37b92ffee288"},{"author":{"_account_id":10497,"name":"KATO Tomoyuki","email":"kato.tomoyuki@jp.fujitsu.com","username":"to222"},"change_message_id":"90038451ff5aac801abd7e95c4ffb5f1f8e80963","unresolved":false,"context_lines":[{"line_number":75,"context_line":"will only participate in one or two.  The four phases are Planning, Fieldwork,"},{"line_number":76,"context_line":"Reporting and Wrap-up.  Each of these phases is discussed below."},{"line_number":77,"context_line":""},{"line_number":78,"context_line":"The Planning phase is typically performed two weeks to six months before"},{"line_number":79,"context_line":"Fieldwork begins.  In this phase audit items such as the timeframe, timeline,"},{"line_number":80,"context_line":"controls to be evaluated, and control owners are discussed and finalized."},{"line_number":81,"context_line":"Concerns about resource availability, impartiality, and costs are also"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3aaa91ec_037e8469","line":78,"range":{"start_line":78,"start_character":4,"end_line":78,"end_character":12},"updated":"2016-06-29 22:20:12.000000000","message":"planning","commit_id":"fa47ad115143ced0ac878f3586cc37b92ffee288"},{"author":{"_account_id":10497,"name":"KATO Tomoyuki","email":"kato.tomoyuki@jp.fujitsu.com","username":"to222"},"change_message_id":"90038451ff5aac801abd7e95c4ffb5f1f8e80963","unresolved":false,"context_lines":[{"line_number":76,"context_line":"Reporting and Wrap-up.  Each of these phases is discussed below."},{"line_number":77,"context_line":""},{"line_number":78,"context_line":"The Planning phase is typically performed two weeks to six months before"},{"line_number":79,"context_line":"Fieldwork begins.  In this phase audit items such as the timeframe, timeline,"},{"line_number":80,"context_line":"controls to be evaluated, and control owners are discussed and finalized."},{"line_number":81,"context_line":"Concerns about resource availability, impartiality, and costs are also"},{"line_number":82,"context_line":"resolved."}],"source_content_type":"text/x-rst","patch_set":3,"id":"3aaa91ec_838a7462","line":79,"range":{"start_line":79,"start_character":0,"end_line":79,"end_character":9},"updated":"2016-06-29 22:20:12.000000000","message":"fieldwork","commit_id":"fa47ad115143ced0ac878f3586cc37b92ffee288"},{"author":{"_account_id":10497,"name":"KATO Tomoyuki","email":"kato.tomoyuki@jp.fujitsu.com","username":"to222"},"change_message_id":"90038451ff5aac801abd7e95c4ffb5f1f8e80963","unresolved":false,"context_lines":[{"line_number":81,"context_line":"Concerns about resource availability, impartiality, and costs are also"},{"line_number":82,"context_line":"resolved."},{"line_number":83,"context_line":""},{"line_number":84,"context_line":"The Fieldwork phase is the most visible portion of the audit.  This is where"},{"line_number":85,"context_line":"the auditors are onsite, interviewing the control owners, documenting the"},{"line_number":86,"context_line":"controls that are in place, and identifying any issues.  It is important to"},{"line_number":87,"context_line":"note that the auditors will use a two part process for evaluating the controls"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3aaa91ec_43db6c7c","line":84,"range":{"start_line":84,"start_character":4,"end_line":84,"end_character":13},"updated":"2016-06-29 22:20:12.000000000","message":"fieldwork","commit_id":"fa47ad115143ced0ac878f3586cc37b92ffee288"},{"author":{"_account_id":10497,"name":"KATO Tomoyuki","email":"kato.tomoyuki@jp.fujitsu.com","username":"to222"},"change_message_id":"90038451ff5aac801abd7e95c4ffb5f1f8e80963","unresolved":false,"context_lines":[{"line_number":88,"context_line":"in place.  The first part is evaluating the design effectiveness of the"},{"line_number":89,"context_line":"control.  This is where the auditor will evaluate whether the control is"},{"line_number":90,"context_line":"capable of effectively preventing or detecting and correcting weaknesses and"},{"line_number":91,"context_line":"deficiencies.  A control must \"pass\" this test to be evaluated in the second"},{"line_number":92,"context_line":"phase.  This is because with a control that is designed ineffectually, there"},{"line_number":93,"context_line":"is no point considering whether it is operating effectively. The second part"},{"line_number":94,"context_line":"is operational effectiveness. Operational effectiveness testing will determine"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3aaa91ec_23c74099","line":91,"range":{"start_line":91,"start_character":30,"end_line":91,"end_character":36},"updated":"2016-06-29 22:20:12.000000000","message":"**pass**","commit_id":"fa47ad115143ced0ac878f3586cc37b92ffee288"},{"author":{"_account_id":10497,"name":"KATO Tomoyuki","email":"kato.tomoyuki@jp.fujitsu.com","username":"to222"},"change_message_id":"90038451ff5aac801abd7e95c4ffb5f1f8e80963","unresolved":false,"context_lines":[{"line_number":99,"context_line":"controls may be required for the auditor to determine the overall operating"},{"line_number":100,"context_line":"effectiveness of the control."},{"line_number":101,"context_line":""},{"line_number":102,"context_line":"The Reporting phase is where any issues that were identified during the"},{"line_number":103,"context_line":"Fieldwork phase will be validated by management.  For logistics"},{"line_number":104,"context_line":"purposes, some activities such as issue validation may be performed during the"},{"line_number":105,"context_line":"Fieldwork phase.  Management will also need to provide remediation plans to"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3aaa91ec_e337f8ad","line":102,"range":{"start_line":102,"start_character":4,"end_line":102,"end_character":13},"updated":"2016-06-29 22:20:12.000000000","message":"reporting","commit_id":"fa47ad115143ced0ac878f3586cc37b92ffee288"},{"author":{"_account_id":10705,"name":"Darren Chan","email":"dazzachan@yahoo.com.au","username":"daz"},"change_message_id":"7dacbe8f42578dbe4906668c0671cd99428027db","unresolved":false,"context_lines":[{"line_number":100,"context_line":"effectiveness of the control."},{"line_number":101,"context_line":""},{"line_number":102,"context_line":"The Reporting phase is where any issues that were identified during the"},{"line_number":103,"context_line":"Fieldwork phase will be validated by management.  For logistics"},{"line_number":104,"context_line":"purposes, some activities such as issue validation may be performed during the"},{"line_number":105,"context_line":"Fieldwork phase.  Management will also need to provide remediation plans to"},{"line_number":106,"context_line":"address the issues and ensure that they do not reoccur.  A draft of the"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3aaa91ec_29fba17c","line":103,"range":{"start_line":103,"start_character":0,"end_line":103,"end_character":9},"updated":"2016-06-29 23:34:34.000000000","message":"fieldwork","commit_id":"fa47ad115143ced0ac878f3586cc37b92ffee288"},{"author":{"_account_id":10497,"name":"KATO Tomoyuki","email":"kato.tomoyuki@jp.fujitsu.com","username":"to222"},"change_message_id":"90038451ff5aac801abd7e95c4ffb5f1f8e80963","unresolved":false,"context_lines":[{"line_number":102,"context_line":"The Reporting phase is where any issues that were identified during the"},{"line_number":103,"context_line":"Fieldwork phase will be validated by management.  For logistics"},{"line_number":104,"context_line":"purposes, some activities such as issue validation may be performed during the"},{"line_number":105,"context_line":"Fieldwork phase.  Management will also need to provide remediation plans to"},{"line_number":106,"context_line":"address the issues and ensure that they do not reoccur.  A draft of the"},{"line_number":107,"context_line":"overall report will be circulated for review to the stakeholders and"},{"line_number":108,"context_line":"management.  Agreed upon changes are incorporated and the updated draft is"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3aaa91ec_634ca842","line":105,"range":{"start_line":105,"start_character":0,"end_line":105,"end_character":9},"updated":"2016-06-29 22:20:12.000000000","message":"fieldwork","commit_id":"fa47ad115143ced0ac878f3586cc37b92ffee288"},{"author":{"_account_id":10497,"name":"KATO Tomoyuki","email":"kato.tomoyuki@jp.fujitsu.com","username":"to222"},"change_message_id":"90038451ff5aac801abd7e95c4ffb5f1f8e80963","unresolved":false,"context_lines":[{"line_number":111,"context_line":"Any issues are entered into the issue tracking or risk tracking mechanism the"},{"line_number":112,"context_line":"organization uses."},{"line_number":113,"context_line":""},{"line_number":114,"context_line":"The Wrap-up phase is where the audit is officially spun down.  Management will"},{"line_number":115,"context_line":"begin remediation activities at this point. Processes and notifications are"},{"line_number":116,"context_line":"used to ensure that any audit related information is moved to a secure"},{"line_number":117,"context_line":"repository."}],"source_content_type":"text/x-rst","patch_set":3,"id":"3aaa91ec_e35ed8e7","line":114,"range":{"start_line":114,"start_character":4,"end_line":114,"end_character":11},"updated":"2016-06-29 22:20:12.000000000","message":"wrap-up","commit_id":"fa47ad115143ced0ac878f3586cc37b92ffee288"}]}