TriageSLA

Vulnerability Exception Approval

Routes a request to accept a finding as a risk to a named approver, with the compensating control attached.

Part of Vulnerability SLA tracking

Tools

Tenable.io, Jira Service Management, Vanta

Outcomes

Every exception has a named approver • Expiry date set on approval • Accepted risk visible to auditors

Documentation

Instruction-ready detail below

When an owner asks to accept a finding, pull the asset owner and the compensating control from <in:jira>the exception request</in:jira>, set an expiry date, and <email>send</email> it to the named approver for a decision.

Instruction file

When an owner asks to accept a finding, pull the asset owner and the compensating control from <in:jira>the exception request</in:jira>, set an expiry date, and <email>send</email> it to the named approver for a decision.

Setup requirements

Tools

Tenable.io, Jira Service Management, Vanta

Trigger

When an owner asks for a finding to be accepted as a risk

Setup time

20 minutes

Other automations in this workflow

Critical CVE Triage

Checks a newly published critical CVE against the asset list and opens one ticket per owning team.

Repeat Finding Root Cause

Groups findings that keep reappearing on the same host, so the missed coverage ring gets fixed once.

SLA Breach Escalation

Escalates findings within three days of their remediation deadline that carry no approved exception.

Related workflows

Vulnerability reports

Builds the periodic report from the scanners themselves, so every open finding carries an owner, a deadline and a visible status.

Patch window coordination

Sequences reboots so the same host is patched once, in dependency order, without a maintenance page.

Audit trails

Joins the scattered administrative change records into one timeline, so an auditor's question is a search rather than a fortnight of exports.

Download

Start with one instruction file.

Download the app and begin with drafts and checklists before you write anything back.

  • •Plain-language instructions
  • •Runs on your machine
  • •Works with your existing setup
  • •Reviewable activity history
Download