# Remediation Roadmap Template

## Prioritization Logic

Prioritize by severity, exploitability, internet exposure, affected data, dependency chains, and business owner urgency.

| Priority | Finding | Severity | Owner | Action | Timeline | Validation |
|---:|---|---|---|---|---|---|
| 1 | F-XXX | Critical | [team] | [action] | 0-7 days | [test] |

## Immediate: 0-7 Days

- [ ] Contain externally exposed critical issues.
- [ ] Rotate exposed secrets.
- [ ] Disable vulnerable functionality if required.

## Short Term: 8-30 Days

- [ ] Patch affected components.
- [ ] Add authorization and input validation tests.
- [ ] Harden identity and network controls.

## Long Term: 31-90 Days

- [ ] Add secure SDLC guardrails.
- [ ] Add attack surface monitoring.
- [ ] Add recurring control validation.

