Browse docs sections

Remediation Planning

Turn analysis output into prioritized remediation plans with clear ownership and sequencing.

Use this workflow to convert findings into an execution plan that engineering and security teams can actually run.

Planning Inputs

Risk and Exposure

  • Active exploitation evidence.
  • Asset criticality and external exposure.
  • Potential blast radius.

Execution Constraints

  • Patch availability and testing effort.
  • Maintenance windows and change controls.
  • Team bandwidth and dependencies.

Prioritization Matrix

PriorityConditionsTarget timeline
P1 ImmediateActive exploitation + critical external exposure24 hours
P2 UrgentNo active exploitation but high business impact72 hours
P3 PlannedLow exposure or compensating controls available7-14 days

Plan Generation Prompt

bash

Convert this analysis into a remediation plan with:

  1. priority tier per issue,
  2. required owner (SOC, platform, app team),
  3. immediate controls,
  4. long-term fixes,
  5. rollback/risk notes.

Minimum Plan Quality

  • Every action has an owner and due window.
  • Dependencies are explicit (testing, approvals, outages).
  • Temporary mitigations are tracked until permanent fix lands.
  • Residual risk is documented for leadership.