Acknowledgement and Resolution
PCIComplianceHubLast updated
Two distinct dispositions for a change-detection alert. Acknowledgement records that someone has seen it and who, and stops there: the finding stays open. Resolution records that it was dealt with, by whom, and with a note of what was decided, and closes it, with a separate disposition for a false positive. Keeping them apart matters for evidence, because an assessor asking what was done about a detected change needs the decision and its reasoning, not a record that somebody looked. Resolving a finding can also retire the baseline it was raised against, so an intentional change becomes the new expected state.