Glossary · R

Remediation

Remediation is the work of fixing an identified security finding so that the risk it represents is removed or reduced, and verifying that the fix holds.

Extended definition

In more detail.

A remediation plan ranks findings by exposure rather than by count, assigns owners and dates, and tracks each to verified closure, which means tested rather than reported. Findings that cannot be remediated within a reasonable period are either formally accepted or escalated. Remediation performance over time, such as how quickly critical vulnerabilities are closed, is itself a control that auditors and insurers examine.

In our work

Where it appears.

By David Selakovic · Published 2026-10-16 · Revised 2026-10-16 · Reviewed every 180 days

Tell us what must not fail.

Discuss a Requirement →