Skip to content
VOC.

05 · VOC area

Remediation Workflow

Findings only matter once they are fixed. This area covers risk-based SLAs, grouping findings by fix rather than by CVE, routing work to the right owner, integrating with ITSM and patch management, and closing tickets only when a rescan proves the fix.

Guides in this area

  1. Remediation SLAs: setting deadlines teams can meet

    Design risk-based vulnerability remediation SLAs: tiers instead of raw CVSS, when the clock starts and pauses, escalation, and measuring compliance.

  2. Remediation workflow and ticketing for a VOC

    An end-to-end remediation workflow: deduplicate findings, group them by fix, route to owners, integrate with ITSM, and close only on rescan evidence.