Advanced level · Module 2: Vulnerability Management and Authorised Testing · Lesson 4 of 4
Prioritising and Tracking Remediation
Fix the most dangerous weaknesses first and prove they are fixed.
In this lesson you will
- Prioritise findings by risk
- Track remediation to verified closure
Key concepts
risk-based prioritisationexposureremediation SLAsverification
The lesson
Prioritise by severity, whether exploitation is known, exposure (internet-facing or internal) and the importance of the system.
Set target fix times — for example, critical internet-facing issues within days — and assign owners.
Re-scan to verify fixes; where something cannot be fixed, record compensating controls and accept the risk formally.
Step by step
- Score the lab findings.
- Set target fix times.
- Apply fixes in the lab.
- Re-scan and close verified items.
Practice activity
Prioritise and remediate the lab findings with a tracker.
Expected result: A tracker showing prioritised findings fixed and verified.
Check your understanding
-
Name three factors in prioritising a vulnerability.
Show answer
Severity, known exploitation, exposure and system importance.
-
How is a fix verified?
Show answer
By re-scanning or checking the configuration again.
Taught live by an instructor — online or in person. Free course lessons are for self-study and do not lead to a certificate — see registration options.