Field notes · 2026-03-22
Ranking Findings So Remediation Actually Happens
Why equal-weight findings lists stall, and how to give owners a clear order of work between review cycles.
A findings register with thirty equal items looks thorough and still goes nowhere. Owners cannot fix everything before the next close, so ranking is part of the review craft—not an afterthought for the cover letter.
We rank by exposure and by how soon the gap can bite. Missing dual approval on high-value payments outranks a stale signature specimen file. Intercompany balances that never reconcile outrank a policy footnote that nobody relies on. The ranking should be explainable in one sentence to a non-finance director.
Each ranked item needs an owner, a target date, and a definition of done—usually a fresh sample of transactions or a revised control description signed by the process owner. Without that definition, status calls become debates about whether a training email counts as closure.
Between full review cycles, a short remediation check-in keeps momentum. Closed items leave the register with the evidence attached; open items carry forward with the same rank unless new information changes the exposure. That continuity is what makes recurring reviews useful rather than repetitive.