---
sourceDocument: Australia Governance, Risk, and Compliance
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/governance-risk-compliance

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Governance, Risk, and Compliance

ft:clusterId :

    - grc

bundleId :

    - grc

workflow :

    - Technology


---

# Audit Issues \& Remediation

# Manage audit issues and remediation {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Issues can be created manually to document audit observations or remediations, or to accept any problems. They are automatically generated from indicator results, attestation results, or control test effectiveness.  
Various types of issues are created under the following conditions:

Issue
:   Created when an indicator fails

Control issue
:   Created when a control attestation is completed indicating that the control is
    Not implemented

Control test issue
:   Created when a control test is closed complete with the control effectiveness set to
    Ineffective

Other issue
:   Created by the user manually

Remediating an issue marks an intention to fix the underlying issue causing the control failure
or risk exposure. Accepting an issue marks an intention to create an exception for a known
control failure or risk. Controls that are Accepted remain in a
non-compliant state until the control is reassessed. In this way, the issue can be used to
document observations during audits.

For more information on issues and observations, see [Manually create GRC issues](https://servicenow-prod.fluidtopics.net/4R0vZEVDdl96xdZoh9dlBw "As a GRC user, you can manually create issues to document policy, risk, or audit observations, or to accept any GRC problems. You can also identify the source of the issue to help analyze and classify the issues.") and [Audit observations](https://servicenow-prod.fluidtopics.net/zl2MfdUAXXGVvn2BCImRMA "Audit observations are the results of an audit. As an important part of the audit report, audit observations represent the results of reviews, analysis, interviews, and discussions.").