Phase 2: Remediate

Purpose

The Remediate phase takes the findings from all completed assessments and synthesizes them into actionable remediation plans. Instead of addressing each regulation in isolation, this phase identifies common gaps, maps shared controls, plans evidence collection, and builds a unified implementation plan.

Skills

Gap Analysis

Performs a cross-regulation gap analysis from all completed assessments. Identifies common gaps, ranks them by severity and regulatory impact, and highlights gaps that affect multiple regulations simultaneously.

Control Mapping

Maps controls across all assessed regulations to eliminate duplicate implementation work. Identifies shared controls that satisfy multiple requirements and highlights regulation-specific controls that require dedicated implementation.

Evidence Plan

Plans evidence collection for all identified gaps and controls. Maps evidence types to control requirements, identifies existing evidence that can be reused, and defines collection procedures for new evidence.

Policy Gaps

Identifies missing or insufficient policies required by assessed regulations. Maps policy requirements to existing documentation, highlights gaps, and recommends policy creation or updates with priority ordering.

Implementation Plan

Builds a prioritized implementation plan to close all identified gaps. Sequences remediation activities based on risk, effort, dependencies, and certification timelines. Includes resource estimates and milestone targets.

Next Phase