Vulnerability BI — sidebar hides with the toggle

Remediation Momentum

Track over time: are we closing tickets faster than they arrive, and is anything ageing past its SLA?

0 CVEs in scope

Median age (days)

0

Backlog >90d

0

Stale but relevant

0
Not updated 180d+ & CVSS≥7

Freshly escalated

0
Updated ≤14d & CVSS≥8
How this works — definitions, thresholds, and what to doShow

Aging bands mirror the Priority Action Matrix SLAs:

  • 0–3d — inside the 72h Critical SLA.
  • 4–7d — inside the High SLA.
  • 8–30d — inside the Medium SLA.
  • 31–90d — past SLA; escalation review.
  • 90d+ — ageing risk debt; requires exception approval.

Median-age targets: Critical ≤ 3d, High ≤ 7d, Medium ≤ 30d. If the median for any severity band drifts above target for two weeks running, remediation capacity is the bottleneck — escalate to leadership.

Help