Review Remediation Guidance

You can view the Remediation Guidance page to review risk findings and CORL's recommendations for vendor remediation.

You can either accept CORL's remediation recommendations or you can provide alternative guidance.

1. View the Executive Summary. For more information, see View the Executive Summary.
2. Click Remediation Guidance. 
3. Review the Risk Findings: 

• • Risk: Finding Number.
  • Level: Risk indicator. 
  • Description: Assessment finding. 
  • Guidance: CORL's recommendation for asking vendor to remediate finding. 
  • Due Date: CORL's recommended date for vendor to complete remediation. 
  • View: View the recommended remediation and optionally provide alternate guidance. 

4. If you agree with CORL's recommendations for all Risk Findings, click Accept CORL Remediation Guidance. 
5. If you do not agree with CORL's recommendations, View the recommended remediation and Provide Alternate Guidance. 
6. Click Back to return to the Executive Summary.

Back to Top

Provide Alternate Remediation Guidance

If you do not agree with CORL's remediation guidance, you can provide alternate guidance.

• If the current Guidance = Remediation, providing alternate guidance will change this to No Remediation.
• If the current Guidance = No Remediation, providing alternate guidance will change this to Remediation.

1. View the remediation and click Provide Alternate Guidance. 
2. Select Reason(s) for providing alternate remediation guidance: 

• • Client Accepted Risk: You accept the risk.
  • Not a valid risk finding: You do not agree with the finding.
  • Do not agree with risk severity: You do not agree with the risk rating.
  • Have a compensating control: Vendor has a compensating control in place and you accept the risk.
  • Free text: Provide Reason(s) why you don't agree with the guidance.  

3. Provide Additional Comments.
4. Click Provide Alternate Guidance. 
5. Click Submit Remediation Guidance. The Client Portal changes Guidance to Alternate Guidance.
6. Repeat the steps for each finding where you want to provide additional guidance. 
7. When you are finished, click Submit Alternate Remediation Guidance. 
8. The Client Portal returns to the Executive Summary.

Back to Top