When drafting a finding, the first review should be with: The lowest level of management on the client side, to verify agreement on the facts. The Director over the relevant line-level managers, to determine whether any compensating controls exist. The head of the relevant business unit, so there are no surprises later. The Internal Audit Director, to ensure the write-up meets department standards for content and style