The Chief Audit Executive must track open audit findings at the enterprise level, using key aging metrics to identify business lines that face remediation backlogs or fail to execute CAP milestones on time.
The audit team monitors several key performance metrics to assess remediation efficiency:
Finding Age (Days) = Current Reporting Date - Original Final Report Publication Date
Remediation Slippage Rate = ( Actual Closure Date - Original Committed Target Date ) / Original Target Window
These aging metrics are compiled into summary tables and reviewed during monthly internal audit leadership sessions:
| Audit Engagement Source | Finding Reference | Severity Rating | Original Target Date | Current Status | Days Overdue / Aged |
|---|---|---|---|---|---|
| Treasury Operations Review | TR-F-1 | High Risk | March 1, 2026 | Overdue | 160 Days Overdue |
| Procurement Audit | PR-F-3 | Moderate Risk | May 15, 2026 | Open Progress | 0 Days (Within Target) |
| Data Center Resilience | DC-F-2 | High Risk | June 30, 2026 | Overdue | 39 Days Overdue |
The CAE includes a summary of these aging statistics in quarterly reports to the Audit Committee, highlighting any departments with significant remediation backlogs. This transparency allows the board to pressure executive management to allocate the resources required to close open vulnerabilities.
Â