What should an auditor verify when auditing areas with previously identified AMI deficiencies?

Management took appropriate and timely action to address any violations and other deficiencies.

Senior management agreed that the findings were legitimate.

Management discussed an action plan to address any violations and other deficiencies.

The business attested to remediating the control gaps.