Our platform greatly expands visibility into a remediation and helps justify decisions supporting remediation or supporting decisions against remediation.
Identifying risks is one thing, remediating is another. Using Fortuna and Prothesis together greatly reduces effort but also allows for auditable activities.
Build out your Plan of Action and Milestones (PoAMs) in an easier manner as well as understand the effort and cost to remediate. This simply allows you to determine if acceptance of risk is more desirable than remediation. Implement due dates and ensure that those responsible receive the notifications they need so PoAMs aren't forgotten. Auditing is enabled to demonstrate user and remediation activity.
Don't take the PoAM all at once, fill in the details at each stage of creating the PoAM. This allows for a focused understanding of what the PoAM needs in order to be created. If you imported risks from Fortuna, then numerous details will be prefilled.
Understand what frameworks might require this risk to be remediated. Don't know for sure, select the framework and click the "suggest references" button or add your own custom reference. This is always super important when auditors ask "why" you did something.
In our platform not only do you understand what it takes to remediate but also the financial benefit of remediation.
Automated reminders of when PoAMs are due.
Understand who is accountable vs responsible for each PoAM. Understand who should be consulted as well as who should be informed.
Understand dependencies, add Milestones, versioning, and add notes.