Review the published finding
Read the affected assets, business impact, reproduction steps and guidance before planning a change. Findings become available to your organisation once the report is approved and published.
Track the remediation
Keep the finding and its remediation progress together in the client portal. Use the engagement discussion to communicate with your assigned testing team.
Request a retest
After implementing a fix, request a retest in the client portal. Someone in your organisation who can authorise testing confirms it, with the dates it may take place. Your testing team records the result against the finding, and it appears once a second person at 1ST Cyber has released it, so you can see whether the fix passed.
Confirm closure
A finding is resolved only when its retest passes. If you decide to accept a risk instead, you record who approved it, why and when it will be reviewed, and we show it as accepted, never as resolved. If further work is needed, use the retest result to continue remediation and request another review.