audit-followup

Tracks audit recommendation remediation through status transitions, evidence verification, and quarterly reporting.

Updated Jul 2, 2026
One-click install
npx skills add https://github.com/tuanpa-nhg-eng/nhg-ipms --skill audit-followup-tuanpa-nhg-eng
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: audit-followup
Source: https://github.com/tuanpa-nhg-eng/nhg-ipms/tree/main/.claude/skills/audit-followup
Command: npx skills add https://github.com/tuanpa-nhg-eng/nhg-ipms --skill audit-followup-tuanpa-nhg-eng

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? After an audit report is finalized, recommendations often get lost or remain unverified. This Skill maintains structured tracking ledgers for audit recommendations, enforces disciplined status transitions, verifies remediation evidence, and produces periodic progress reports for oversight committees. ## Core Features & Use Cases - Two-Level Tracking Ledgers: Maintains a per-engagement ledger (06-theo-doi/theo-doi-khac-phuc.md) and a consolidated organization-wide ledger (00-quan-tri/so-theo-doi-kien-nghi.md), keeping both synchronized. - Status Lifecycle Management: Enforces the standard lifecycle open → in-progress → implemented → verified, plus overdue and risk-accepted, with strict rules (e.g., high-severity items require re-testing, not just paper evidence). - Quarterly Reporting: Aggregates the master ledger into verification rates, overdue counts by severity, top open high-risk items, and quarterly trends, exportable as Markdown or bilingual A4 HTML for the audit committee. - Use Case: After issuing a final audit report with 12 recommendations, open a tracking ledger, update statuses as units submit evidence, verify high-risk fixes via re-testing, and generate the quarterly remediation report for the board. ## Quick Start Open a remediation tracking ledger for the just-completed audit engagement and list all recommendations with owners and deadlines.

Frequently Asked Questions about audit-followup

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I track audit recommendation remediation after a final report?

Open a per-engagement tracking ledger immediately after the final report, with one row per recommendation covering ID, content, severity, responsible role, committed deadline, status, and verification evidence. Synchronize every update with the organization-wide master ledger.

What status lifecycle should audit findings follow?

Recommendations move through open, in-progress, implemented, and verified, with overdue and risk-accepted as additional states. The implemented status only means the unit claims completion; verified requires the auditor to review actual evidence.

When can an audit recommendation be marked as verified?

A recommendation is verified only after the auditor examines concrete evidence such as issued documents, system configurations, or re-test samples, and records the evidence reference in the ledger. High-severity items require mandatory re-testing, not paper evidence alone.

How is risk acceptance handled for unresolved audit findings?

Risk acceptance is valid only with a formal approval document from the correct authority level, such as the CEO or audit committee for high-severity items. Verbal acceptance is not accepted, and the approval document reference must be recorded.

What goes into a quarterly audit remediation report?

The quarterly report aggregates the master ledger into the verified-to-total ratio, overdue counts by severity level, top open high-severity recommendations, and quarter-over-quarter trends. Output is Markdown, with a bilingual A4 HTML version for committee presentation.