Use this template to set up vulnerability tracking tickets or as a guide to create your own. Submit the completed ticket(s) as evidence for your audit.
Vulnerability tracking tickets are used to record monitoring and scanning activities of in-scope production systems as well as any vulnerabilities found.
These tickets demonstrate:
That vulnerability monitoring and scanning of in-scope production systems is implemented
What tools are being used to conduct monitoring and scanning
How often are systems being monitored and scanned
What vulnerabilities are found during monitoring and scanning
Who is alerted to vulnerabilities found
What steps were taken to investigate any found vulnerabilities
What remediation was planned to address vulnerabilities found
Ticket Template
Ticket Number |
|
Date and Time |
|
Scan Type |
|
Tool Used |
|
Vulnerability Type Found |
|
Vulnerability Description |
|
Vulnerability Rating |
|
System(s) Affected |
|
Alerted Parties |
|
Investigation |
|
Resolution Status |
|
Resolution Date |
|