SCF Findings Application Overview

the scf findings application captures compliance audit findings and links them to controls, evidence, and remediation plans findings can be ingested through the scf data import application, managed manually, or exported for offline editing and re import this application provides traceability by connecting gaps (findings) to their associated controls, evidence, and remediation activities scf findings record fields control reference – linked scf library control finding title / # – identifier and short description finding summary – overview of the issue owner – assigned individual responsible for managing the finding selected frameworks – framework(s) where the finding applies scf domain & control – contextual information about the related scf control evidence request list (erl) # – linked evidence requirement analysis source – example internal review, external audit reference year – applicable reporting year discovery date – date the finding was identified external auditor – auditor contact responsible for validation certification owner team – team accountable for certification expired finding / requirement – boolean indicators notes – additional context comments – rich text editor for collaborative updates audited – checkbox to indicate whether the finding has been formally audited