Findings

Under Findings you keep non-conformities, incidents and improvements. Each finding has a type, a title, a description, the clause it concerns, an owner and a deadline.

A finding is open until you close it with a closing note: what you did and why it is solved. A finding past its deadline shows as overdue in the list and in the overview of its chapter, and its owner (else the owners and admins) gets one reminder by mail.

Filter the list on type and on open or closed findings.

Incidents

For an information security incident (ISO 27001), choose the type Incident. You then also record when it happened, its impact (low, medium or high), whether personal data was involved and the day you reported it to the authority, if you did. When personal data was involved, check whether it must be reported to the Dutch Data Protection Authority within 72 hours. Choose Incident under the type filter to see only the incidents; each one shows these details under its title.