Remediation
Fixing the issues a test identified, in priority order.
The test is the diagnosis; remediation is the treatment, and it is where the value is realized. A report that is read and filed has changed nothing about your exposure.
Good findings include specific guidance rather than generic advice, because the gap between apply least privilege and here is the exact group to change is the gap between a report and a fix.
Where this comes up
Remediation sits inside our penetration testing work. If you are trying to work out what this means for your own environment rather than in the abstract, that is the page worth reading next, and a short call will get you a straight answer faster than either.
Related terms
Retest Verifying that findings from a previous test have actually been fixed. Risk rating The severity assigned to a finding, ideally accounting for your environment rather than the raw score alone. Penetration test An authorized simulated attack against your systems to find and demonstrate exploitable weaknesses before a real attacker does. Plan of action and milestones A documented plan for closing known compliance gaps, with owners and target dates.