← CIS Controls v8 in plain English

7.2 IG1

Control 7 / Continuous Vulnerability Management

Establish and Maintain a Remediation Process

Think of it likeHaving a plan to fix cracks in the foundation as soon as they’re found.

In plain English

Once a weakness is found, a set strategy prioritizes and fixes it quickly and effectively.

Related CSF subcategories (unofficial mapping)

ID.RA-05: Threats, vulnerabilities, likelihoods, and impacts are used to understand inherent risk and inform risk response prioritization.ID.RA-06: Risk responses are chosen, prioritized, planned, tracked, and communicated.