Corrective actions

Create, verify, and close actions against findings. Overdue is derived from due date — it is not a stored status.