Remediation and Remediation Tracking

Remediation tracking is a systematic process used to monitor and manage the progress of resolving security vulnerabilities and weaknesses identified within an organization's infrastructure. Remediation tracking involves tracking the entire lifecycle of a vulnerability from discovery to resolution, ensuring that appropriate actions are taken to mitigate the identified risks. The goal of remediation tracking is to ensure vulnerabilities are addressed promptly and effectively, reducing the organization's exposure to potential threats.

Vulnerability management Service Level Agreements (SLAs) often change from one organization to the next; however, meeting these SLAs is a common concern among organizations industry-wide. SLAs define an expected level of service by which measurements, metrics, or penalties can be established. SLA compliance is a critical component of a vulnerability management program.

There is no set timetable to resolve vulnerabilities that fits every situation. SLAs can vary from organization to organization, and even vary between business units within the organization. Tenable recommends aligning SLAs with technology or business objectives, starting with the most important assets. The Department of Homeland Security has made available 10 resource guides to help organizations implement business practices to reduce cyber risk. Volume 4: Vulnerability Management provides guidance for organizations to work with stakeholders to develop remediation timeframes that align with business goals.

As vulnerabilities are identified, remediation must be prioritized and tracked. Reviewing remediated vulnerabilities and the remediation timeframe provides valuable information to the organization on the effectiveness of the risk remediation program.