Remediation Plan
What is Remediation Plan?
A documented plan of action for addressing identified compliance gaps, audit findings, or security vulnerabilities. Remediation plans include specific actions, owners, timelines, and priorities for closing each identified gap.
Terms that appear alongside remediation plan
Each of these is named in at least one of the same controls as remediation plan. The number is how many controls name both.
- cyber incident 3 shared controls
- lessons learned 3 shared controls
- cybersecurity 3 shared controls
- compliance 3 shared controls
- insider threat 2 shared controls
- impact assessment 2 shared controls
- incident reporting 2 shared controls
- data breach notification 2 shared controls
Frameworks that govern remediation plan
What the standards actually require on remediation plan
Requirements naming remediation plan across 6 standards, quoted from the control text.
The entity agrees and finalises a Remediation Plan for the findings, in close consultation with the supervisor/authority, and tracks remediation to completion.
TIBER-3.6 · Remediation Plan →Within eight weeks of the authority's notification under Article 12(7) the entity must give the TLPT authority, and its competent authority where different, remediation plans and the DORA Article 26(6) documentation.
dora-rts-on-threat-led-penetration-testing-commission-delegated-regulation-eu-2025-1190::13 · Article 13: Remediation plan →Plan and implement risk responses for vulnerabilities, including remediation, mitigation, or acceptance with rationale.
SP800-218-RV.2.2 · Develop and Implement Remediation Plans →The assessment and gap identification must use the form TSA provides (TSA Form 1604, Pipeline Cybersecurity Self-Assessment, aligned with the NIST Cybersecurity Framework functions and categories;
tsa-pipeline-cybersecurity-directives::SD01-II.D.2 · SD01 II.D.2 and 3 Use TSA Form 1604 and submit the assessment and remediation plan →The preparation phase ends with a kickoff meeting that formally begins the agency authorization, introduces the team, reviews the offering and aligns the process and milestone timelines, so that all stakeholders share an understanding of the process, milestone...
fedramp-rev-5::A.6 · A.6 Kickoff meeting →The entity must keep the capability needed to carry out the BCP, including access to technology, resources and people (which may be held in-house or under an agreement with another party, in which case that agreement must meet the service provider requirements...
apra-cps-230-operational-risk-management::40 · Para 40 Maintain BCP execution capability; monitor tolerances; report breaches to the Board →Questions people ask about remediation plan
What is Remediation Plan?
Why is Remediation Plan important for compliance?
Which compliance frameworks address Remediation Plan?
Where can I learn more about Remediation Plan?
See how Remediation Plan applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.