Mitigations are the practical measures your assessment recommends for the site. Each one is a task you complete, assign to someone, or mark as not applicable with a reason.
Your mitigation list
Open the site and go to Mitigations. They're grouped by the risk they address and show a status: Not started, In progress, Completed or Not applicable.
Assigning a task
Open a mitigation and choose Assign. Pick a member of your organisation or enter an email for someone outside PROVA, and set a due date. They receive an email with what's needed, and reminders before and after the due date until it's done.
Completing a task
Mark it complete and, where it asks, attach evidence: a photo, a policy document, an invoice. Evidence is stored in the site's Evidence Portal.
Not applicable
If a measure genuinely doesn't apply to your premises, mark it not applicable and give a short reason. The reason is recorded in your report.
Reminders for the Premises Controller
If mitigations are still unassigned a week after the assessment, the PC gets a reminder, then weekly nudges until they're all assigned. Assigning them stops the reminders.
Your overall progress
The site dashboard shows the percentage of mitigations complete. That figure, with your plans and training, is what your compliance report is built from.