Flagship course

Remediation Control Lab

Six weeks of board work, evidence critique, and closure rituals for people who live inside an audit remediation tracking app.

Analytics charts representing remediation metrics

Learning outcomes

  • Design an owner matrix with backups that survive leave and contractor churn
  • Write closure notes that mirror finding text without fluff
  • Build evidence packs with retrieval paths auditors can reopen
  • Run a 15-minute weekly triage without status theatre
  • Separate accepted risk from deferred work with dated sign-off
  • Prepare a retest pack that anticipates cold re-audit questions

Informational pricing

£890 / person

Included in the Control Floor plan. No payment is taken on this site — we invoice after a short fit call. Team discounts available via Assurance Wing.

Duration: 6 weeks · 90 minutes live each week · ~3 hours guided practice.

Modules

  1. Intake hygiene

    Import findings without duplicates, capture source report IDs, and set aging clocks that mean something.

  2. Owner matrix & SLA reality

    Map people (not departments), backups, and what “blocked-external” actually requires before the clock pauses.

  3. Evidence chains

    Screens, exports, ticket links, and dated attestations — plus what fails a cold review.

  4. Partial remediation honesty

    When a fix is incomplete, how to document residual risk instead of marking closed.

  5. Retest & re-audit readiness

    Build a pack an external reviewer can navigate without a guided tour.

  6. Live board critique

    Bring redacted items from your audit remediation tracking app; facilitators mark gaps in public (kindly).

Instructor

Portrait of instructor Nadia Ellison

Nadia Ellison

Former second-line controls lead for a UK retail bank. Nadia has shepherded three major re-audits and now designs Metric Insightful labs so the critique feels like a real assurance conversation — not a slide deck review.

Learner notes

“Week three’s evidence critique caught our habit of attaching unsigned policy PDFs. Embarrassing — and exactly why we enrolled.”
Marcus W., IT risk · Cardiff
The live board sessions are strong. Limitation: if your company refuses to redact samples, you will practise on the fictional backlog more than your own — still useful, but less transfer.
Client in healthcare administration

FAQ

Do you teach a specific audit remediation tracking app vendor?

No. Patterns transfer across tools that support owners, statuses, attachments, and filters. We use a neutral board in class so vendor UI does not dominate the learning.

What if I miss a live session?

Recordings stay available for 30 days. You still owe the weekly practice pack; facilitators will not mark late work after the final critique week.

Is there a real limitation I should know before enrolling?

Yes. This course will not accelerate findings owned by external vendors with contractual SLA delays. We teach how to document the blocker clearly — we cannot invent leverage your contracts do not provide.

Can my manager join only the last two weeks?

Managers usually fit better in Stakeholder Closure Briefings. Joining Control Lab mid-stream without the owner matrix module tends to create mismatched expectations in critique sessions.