anchor: In these cases, the central security management groups kept track of audit findings related to information security and the organization's progress in implementing corrective actions.
positive: The central security management groups kept track of audit findings.
negative: The audit findings did not cover the organization's progress in implementing corrective actions.