Penetration test remediation tracking
Overview
PDF pentest shelfware invites negligence claims—ticket every finding.
Fields
Finding ID, severity, exploitability, owner, due date, compensating control if not fixing, evidence closure screenshot.
SLAs
Critical 30 days typical; highs 60—insurers may dictate shorter.
Retest
Schedule partial retest explicitly funded in SOW clause.
Communication
Executive summary sans exploitable PoC details emailed leadership; technical annex restricted.
Versioning
V2 report supersedes V1 archived but linked for historical narrative.
Related Articles
EDR deployment checklist for new workstations
## Overview Use this runbook when onboarding a new Windows workstation or re-imaging a device that...
Handling Defender for Business false positives
## Overview False positives waste analyst time and train users to ignore alerts. This article stand...
Application allowlisting with Windows Defender ASR rules
## Overview Attack Surface Reduction (ASR) rules reduce exploit surface by constraining Office macr...