In these cases, the central security management groups kept track of audit findings related to information security and the organization's progress in implementing corrective actions.
The central security management groups kept track of audit findings.
The audit findings did not cover the organization's progress in implementing corrective actions.