GRC & Audit Support · Lesson 8 of 8
Reporting progress clearly
A report should help its reader make a decision. A long list of completed tasks can hide unresolved risk.
Show progress and remaining exposure
A fictional weekly update, not site-wide performance data.
- 3 verified fixes
Changes have supporting verification. State the relevant scope and reporting period.
- 2 overdue high-impact gaps
Name the owners, blockers, and decision needed. These remain visible alongside the fixes.
Read the visualWhich follow-up makes the overdue count useful?
Identify the accountable owner, next action, and date or decision needed.
Choose meaningful measures
Explain what is counted and the reporting period. Separate completed fixes from open or overdue work.
Keep claims supported
Show evidence and limitations. A sample result does not automatically represent the full population.
Ask for a decision
Highlight what needs ownership, resources, or approval, and when. Keep technical detail available for follow-up.
Put it in context
Your weekly summary reports three verified fixes and two overdue high-impact gaps. It asks the designated owner to decide the next treatment, rather than calling the program green.
Report remaining risk and decisions needed, alongside progress.
Read the sources
Make it stick.
Try one short question to check your understanding and save this lesson to your progress.