When drafting a finding, the first review should be with:

• The head of the relevant business unit, so there are no surprises later.
• The Director over the relevant line-level managers, to determine whether any compensating controls exist.
• The lowest level of management on the client side, to verify agreement on the Facts
• The Internal Audit Director, to ensure the write-up meets department standards for content and style.