In progress explained
How to track security work in progress
In progress means work has started but is not yet complete. An estimated completion date supports planning and does not turn the answer into a met or confirmed finding.
Record what remains
Select In progress for an unfinished answer, add a realistic estimated completion date, and use the note to describe remaining work or dependencies. Save the answer and note together.
Use the estimate
Review the estimate alongside roadmap dates and the programme target. Update it when the plan changes so that overdue work remains visible instead of appearing complete.
Finish with evidence
When implementation is complete, update the answer and provide an evidence reference for review. A client answer remains unconfirmed until an assessor checks the requirement.
A practical example
Example: you have approved an account-review procedure but have not completed the first review. Mark the work In progress, record the expected completion date, and add a note explaining what remains. Completion still needs supporting evidence and assessment.