Remediation Validation
Remediation validation confirms that a remediation action removed the exposure, not only that a ticket or task was closed. Validating remediation ensures that the reduction in TruRisk Score reflects a real reduction in risk.
How ETM Validates Remediation
| Method | How it works |
|---|---|
| Source detection | When a connected source, such as VMDR, scans the asset again, ETM updates the finding with the status from the latest detection. |
| TruConfirm assessment | TruConfirm sends safe checks against the live asset to determine whether the vulnerability can still be exploited, and updates the QVSS score of the finding. |
| Agent Val revalidation | Agent Val revalidates vulnerabilities after mitigation to confirm that they are no longer exploitable. |
You can close a finding manually only when it comes from a single Generic CSV source. Findings from other sources are closed based on the source data.
In This Section
How to Launch Scans from Risk Management tab
Measure risk reduction after remediation