We are looking for a way to manage management response to control deficiencies within Wdesk.  We would love to hear how other clients are doing this, there doesn't seem to be a formalized way to gather this information from the business owners once we determine a control is ineffective.