A finding closes on verification, never on the word of whoever remediated it, and its age runs from the day it was raised rather than the latest agreed date. Which remediation actually held, and which weakness has already reappeared elsewhere in the group.
None of these are required to start. Hire the team first, connect a system when you are ready, and build a custom integration for anything that is not on this list.
