1. An audit action is monitored until it has been formally closed.
2. If audit actions are not addressed in a timely way, the effort and cost involved with the audit are wasted.
3. All remedial and improvement actions should be tracked, with progress reported to senior management and the audit committee.
4. When an outstanding audit action is closed, then the risks as they exist at that point are being accepted.