Remediation
What is Remediation?
The process of correcting identified deficiencies, vulnerabilities, or non-conformities to bring systems or processes into compliance.
Terms that appear alongside remediation
Each of these is named in at least one of the same controls as remediation. The number is how many controls name both.
- compliance 73 shared controls
- vulnerability 59 shared controls
- audit 58 shared controls
- policy 42 shared controls
- cybersecurity 35 shared controls
- governance 33 shared controls
- nist 28 shared controls
- incident response 28 shared controls
Frameworks that govern remediation
What the standards actually require on remediation
Requirements naming remediation across 6 standards, quoted from the control text.
Operate a defined process for fixing vulnerabilities found in applications, using automated remediation where the vulnerability class allows.
CCM-AIS-07 · Application Vulnerability Remediation →The organisation selects a remediation strategy from full fix, configuration mitigation, workaround, or deprecation based on severity, complexity, and customer needs.
30111-6.5 · Remediation Strategy Selection →Establish and maintain a risk-based remediation strategy documented in a remediation process, with monthly, or more frequent, reviews.
CIS-7.2 · Establish and Maintain a Remediation Process →Address CAT III (Category III, low severity) STIG findings, which degrade measures to protect against loss.
STIG-SEV-CAT3 · Category III (low severity) finding remediation →To the extent possible, all intrusion remediation activities are conducted in a coordinated manner during the same planned outage.
ISM-1732 · To the extent possible, all intrusion remediation activities are conducted in a coordinate →Worker grievance + remediation + worker voice are cross-cutting requirements applying across all 10 principles. Compliance Benchmarks include: ANONYMOUS + multiple-channel grievance mechanisms (worker hotlines + grievance committees + worker-representative-led...
FLA-Grievance · Worker Grievance, Remediation and Worker Voice (FLA Cross-Cutting) →Questions people ask about remediation
What is Remediation?
Why is Remediation important for compliance?
Which compliance frameworks address Remediation?
Where can I learn more about Remediation?
See how Remediation applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.