Control testing results are tracked and drive remediation actions
Turning failed control tests into tracked remediation is a parallel improvement loop to incident lessons learned, sharing the same close-the-loop discipline.
Recording what passed and failed in scheduled control tests, with tracked remediation, is the evidence base an independent review draws on.
This process control runs planned control tests on schedule and turns every failure into a tracked remediation action, the follow-through A.5.36 requires of compliance testing.