TriageSLA

Critical CVE Triage

Checks a newly published critical CVE against the asset list and opens one ticket per owning team.

Part of Vulnerability SLA tracking

Tools

Qualys, Jira Service Management, Slack

Outcomes

Affected hosts listed within the hour • One ticket per owning team • Patch date agreed and recorded

Documentation

Instruction-ready detail below

When a critical CVE is published, check <in:spreadsheets>the asset list</in:spreadsheets> for the affected product, open <jira>one ticket per owner</jira>, and <slack>post</slack> the host count and the patch deadline.

Instruction file

When a critical CVE is published, check <in:spreadsheets>the asset list</in:spreadsheets> for the affected product, open <jira>one ticket per owner</jira>, and <slack>post</slack> the host count and the patch deadline.

Setup requirements

Tools

Qualys, Jira Service Management, Slack

Trigger

When a critical CVE is published for a product in the asset list

Setup time

30 minutes

Other automations in this workflow

Repeat Finding Root Cause

Groups findings that keep reappearing on the same host, so the missed coverage ring gets fixed once.

SLA Breach Escalation

Escalates findings within three days of their remediation deadline that carry no approved exception.

Vulnerability Exception Approval

Routes a request to accept a finding as a risk to a named approver, with the compensating control attached.

Related workflows

Vulnerability reports

Builds the periodic report from the scanners themselves, so every open finding carries an owner, a deadline and a visible status.

Patch window coordination

Sequences reboots so the same host is patched once, in dependency order, without a maintenance page.

Audit trails

Joins the scattered administrative change records into one timeline, so an auditor's question is a search rather than a fortnight of exports.

Download

Start with one instruction file.

Download the app and begin with drafts and checklists before you write anything back.

  • •Plain-language instructions
  • •Runs on your machine
  • •Works with your existing setup
  • •Reviewable activity history
Download