Three-Tier Framework
Battle-tested prioritization with clear SLAs. Each tier represents a distinct risk category with specific remediation timelines and success criteria.
Framework Philosophy
Stop Active Bleeding
Tier 1 addresses immediate threats. Vulnerabilities attackers exploit today for ransomware, data theft, and initial access.
Maintain Compliance
Tier 2 keeps certifications intact. Issues that auditors flag and regulators penalize.
Build Resilience
Tier 3 prevents tomorrow's emergencies. Investments that compound and reduce overall security burden.
High Priority
24-72 Hour SLAImmediate exploitation possible. Vulnerabilities that attackers actively exploit—ransomware vectors, exposed databases, missing MFA on privileged accounts.
- Critical Open Ports
- Publicly Accessible Resources
- Missing MFA on Admins
- Unpatched Critical CVEs
Regulatory
30 Day SLACompliance-critical findings. Issues that impact PCI DSS, HIPAA, SOC 2, GDPR, and other frameworks. Failed audits mean lost certifications.
- Network Segmentation Gaps
- IAM Compliance Violations
- Missing Encryption Controls
- Audit Logging Deficiencies
Best Practices
90 Day SLASecurity hygiene improvements. Defense-in-depth enhancements that prevent future attacks and reduce technical debt.
- Cloud Resource Hardening
- RBAC Optimization
- Non-Critical Open Ports
- Credential Lifecycle Management
Remediation SLAs
| Tier | Timeline | Escalation | Example Findings |
|---|---|---|---|
| 1High Priority | 24-72 hours | CISO + Exec after 48h | RCE, SQLi, exposed admin |
| 2Regulatory | 30 days | Security Manager after 14d | Missing encryption, weak passwords |
| 3Best Practices | 90 days | Sprint planning review | Hardening gaps, RBAC cleanup |
Security Domains
Each tier categorizes findings across four core security domains for comprehensive coverage and clear ownership.
Network
Ports, firewalls, segmentation
IAM
Identity, access, privileges
Data
Databases, encryption, DLP
Processing
Compute, containers, CI/CD
Ready to implement?
Explore the full framework documentation on GitHub, including integration guides and scanner configurations.
View on GitHub