An audit finding can be closed when:

An audit finding signifies a weakness or gap in a process or control that requires remediation. The finding remains open until management implements the agreed-upon corrective measures. The audit lifecycle for a finding concludes only when these follow-up actions are fully completed and have been validated by the audit function (or another independent body) as being effective in mitigating the identified risk. Closing a finding is the formal acknowledgment that the required remediation has been successfully executed and verified, thereby strengthening the control environment.

A. Collecting and analyzing evidence is part of the initial audit fieldwork that leads to the identification of a finding, not its closure.
B. This is the goal of the corrective action, but the finding is closed based on the completion of the action, not just a reassessment.
C. The final audit report is what formally communicates the finding to management; the closure process happens much later, after remediation.

1. The Institute of Internal Auditors (IIA). (2017). Practice Guide: Engagement Final Communication and Performance Monitoring. p. 11, "Monitoring should continue until the disposition of the observation is deemed satisfactory... This may occur when senior management has accepted the risk or when action has been taken and verified."

2. Ratliff, R. L., & Reding, K. F. (2012). Auditing: A Business Risk Approach. Courseware/Textbook, Cengage Learning. Chapter on "Reporting and Follow-Up," which details that follow-up procedures are necessary to ensure management actions have been implemented before a finding can be closed.

3. Walker, P. L., Shenkir, W. G., & Barton, T. L. (2011). Enterprise risk management: Pulling it all together. Institute of Internal Auditors Research Foundation. p. 128, discusses the audit process including "monitoring the progress of management's action plans."