{"id":288,"date":"2021-10-05T23:49:00","date_gmt":"2021-10-05T23:49:00","guid":{"rendered":"https:\/\/www.cycognito.com\/blog\/?p=288"},"modified":"2024-08-02T13:38:58","modified_gmt":"2024-08-02T20:38:58","slug":"where-the-heck-do-i-start-or-why-we-created-remediation-planner","status":"publish","type":"post","link":"https:\/\/www.cycognito.com\/blog\/where-the-heck-do-i-start-or-why-we-created-remediation-planner\/","title":{"rendered":"Cycognito remediation plan informs security leaders about how to get from a D to a B"},"content":{"rendered":"\n
\"\"<\/figure>\n\n\n\n

When everything is critical, nothing is critical<\/h2>\n\n\n\n

Every security tool in the security operations toolbox generates alerts. New exposures. New vulnerabilities. New viruses and malware. New devices accessing our network. They all generate an alert. And when it\u2019s your job to sift through the alerts to triage, validate, and action them, it\u2019s incredibly hard to prioritize each against the mountain of other things that could and should be fixed.<\/p>\n\n\n\n

It\u2019s an issue every security operations practitioner and their boss deals with on a daily basis: We have all of these issues. We have all of these alerts. We have all of this work. So where do we start?<\/p>\n\n\n\n

In a world where every alert, every asset, every issue is not equal, you need to begin prioritizing by thinking about two things: impact and effort. What do I tackle first?<\/p>\n\n\n\n

So we built the Remediation Planner to help your teams make the biggest impact in eliminating security gaps with the most focused and efficient effort possible.<\/p>\n\n\n\n

Improvement is in the eye of the beholder (and it\u2019s beautiful)<\/h2>\n\n\n\n

Everyone wants to get better and improve. For enterprises, this simply means being more secure than yesterday. And that could be by having fewer vulnerabilities in your attack surface. Or it could be by patching 1,000 machines.<\/p>\n\n\n\n

We built the CyCognito platform<\/a> to go beyond discovering issues (and with its high fidelity–you don\u2019t need to worry nearly as much about false positives as you do with, say, an IDS system), and<\/em><\/strong> to take everything about that issue into context to better prioritize its resolution AND the resolution of multiple issues.<\/p>\n\n\n\n

To make things easy on security operations teams when it comes to remediation, our approach is to give you:<\/p>\n\n\n\n