Understanding Findings

How to interpret and prioritize security findings

Finding Severity Levels

  • Critical - Immediate action required
  • High - Address within 24-48 hours
  • Medium - Address within 1 week
  • Low - Address during next maintenance window

Finding Details

Each finding includes:

  • Detailed description of the vulnerability
  • Affected devices and systems
  • Mapped compliance controls
  • Evidence collected during testing
  • Step-by-step remediation guidance