Remediation
Also known as: Corrective action, Mitigation, Resolution
Remediation is the process of correcting a deficiency, vulnerability, or non-compliance finding identified during an audit or risk assessment. The goal is to bring a control back into alignment with required standards or to eliminate a security risk. It involves implementing specific actions to resolve the root cause of an issue rather than simply treating its symptoms.
In practice
After an auditor identifies a "finding"—such as missing encryption on a database—the organization develops and executes a remediation plan to implement the required technical control. The auditor then reviews evidence of this fix to verify that the risk has been neutralized and can officially close the finding.