Security Remediation Tracking Software

[Blake Brown <Blake.Brown () MHCC EDU>]

Good afternoon,

What software are you using for tracking security audit remediation items. Currently we are spreadsheet based and while 
it works we are running into some challenges using this method. One thought is to build a home grown system using a 
basic web front end / SQL backend but if there is already reasonability priced canned software that can provide this 
functionality we are open to purchasing it.

Our current tracking needs are comprised of items such as Owner, Risk, Host Info, Protocol, Port, Description of issue, 
Possible Solution, Reference Links, Remediated (y/n), Remediation date, Notes, Re-tested by, Re-test pass/fail  and 
Re-test date. We cannot foresee needing anything to elaborate but rather a tool that easy for the responsible party to 
identify the cause, remediate and verify. There should also be a simple reporting function to provide analyst / 
executive reporting.


Thanks,
Blake Brown
Infrastructure Manager



**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community