Logging a concern
What this is
A concern is any issue raised by a team member or manager — such as a suspected phishing attempt, a policy violation, or a process failure. Logging it creates a formal record with a description, date, and status.
What to do
In the Reviews tab, use the concern form to log what happened, when it occurred, and any immediate action taken. Team members can also raise concerns directly from their training page.
Why it matters
Documenting concerns is a regulatory expectation. Unrecorded concerns are invisible to auditors and create liability. Logging shows your organisation takes issues seriously.
What happens next
Logged concerns appear in your compliance evidence. You can track resolution status and link related follow-up actions. Open concerns are flagged until resolved.
