Every organization approaches remediation a little differently. Ultimately, how you prioritize needs to work with your organization’s structure, capacity, and skillset. Typically, we recommend prioritizing by Finding type in the following order:
- Design flaw
- Not designed
- Not documented
- Best practices
Learn more about design evaluation finding types.