Remediation Plan

Definitions

1. A documented plan describing how identified vulnerabilities, control gaps, or incident findings will be fixed, by whom, and on what timeline. Strong remediation plans tie actions to risk and dependencies instead of listing vague intentions without ownership or due dates.

   In plain English: A written plan for fixing security problems and tracking who will do what.

   Example: "The board accepted the findings only after the team produced a remediation plan with concrete owners for each exposed service and identity gap."

Related Terms

• Defense in Depth
• Pre-Mortem
• Scope Creep Culture
• IRP
• Remediation Priority
• Response Plan
• Risk Priority
• Risk Treatment