Check effectiveness of corrective action

The penetration test used several test accounts on internal systems and on the customer VPN gateway. After the test, two of these accounts were still active on the identity provider, with membership of a group with elevated rights. The tester found them again during the retest of the network. Test accounts should be removed on the day the test ends, and nobody had that removal as a Task.