← CIS Controls v8 in plain English

18.3 IG2

Control 18 / Penetration Testing

Remediate Penetration Test Findings

Think of it likeFixing any weak spots found in your home’s defenses after a security test.

In plain English

Any weakness uncovered during penetration testing is fixed, closing the gaps the test revealed.

Related CSF subcategories (unofficial mapping)

ID.IM-02: Improvements are identified from security tests and exercises, including those done in coordination with suppliers and relevant third parties.ID.RA-06: Risk responses are chosen, prioritized, planned, tracked, and communicated.