text: In these cases , the central security management groups kept track of audit findings related to information security and the organization 's progress in implementing corrective actions .
  
  ###
  
  The audit findings did not cover the organization 's progress in implementing corrective actions .