Assessing the Risk on the initial finding is great, however on entry you cannot risk assess the Root Cause, Corrective / Remedial action until the requestee has addressed the finding.
It would be more beneficial to have the Risk Rating come up for the Requestee to enter, rather than the Requestor having to complete prior to the finding being addressed. What I have found is the Requestee doesn't reassess this the data being gathered is inaccurate, and needs to be reassessed.
Leanne Appleby
