This page defines the Recommendation Library used within AuditFlow OS.

The library provides reusable recommendation wording to support consistent reporting, stronger management actions, and faster drafting across cyber, AI, data, governance, third-party, and IS4-style reviews.

It sits behind the Findings Register and Findings Catalogue as a reusable content asset.

1. Purpose

The purpose of the Recommendation Library is to:

• provide standard recommendation wording for common control weaknesses
• improve consistency in how corrective actions are described
• support faster drafting of findings and reports
• reduce vague, weak, or non-actionable recommendations
• improve comparability of actions across audits
• support formal, audit-ready reporting

The library does not replace judgement. It provides reusable action wording that should be adapted to the issue and operating context.

2. What the Recommendation Library Is

The Recommendation Library is the reference set of standard recommendation wording used in AuditFlow OS.

It is used to:

• support drafting of findings
• improve consistency of remediation language