What is Remediation Guidance & Retesting?
Remediation Guidance & Retesting is senior guidance for your IT provider or team on fixing the findings that matter most, in the order that reduces the most risk, followed by a retest to confirm each fix worked.
Most security reports end the same way: a ranked list of findings and a recommendation to fix them. The hard part is the next step. Someone has to decide what to change first, make the change without breaking anything, and then confirm it worked.
This is that next step. We start from the findings, agree the order with you, and guide your IT provider or team through each change: what to change, why it matters and how to make it safely. That can mean Microsoft 365 settings, policy updates or other configuration changes. When the changes are done, we retest the original findings so you know which are resolved.
Your IT provider stays responsible for running your systems. Avertix provides the security expertise behind the changes and the independent check afterward.
Who needs it?
- A business that has a security report and needs help acting on it
- A company whose IT provider will make the changes but wants senior guidance
- A team that needs to show an insurer or customer that issues were fixed
What problems does it address?
- A report full of findings, and nobody sure which to fix first
- An IT provider willing to make changes but unsure which ones matter or how to make them safely
- Fixes made months ago that nobody has checked
- An insurer, customer or auditor asking for proof that issues were resolved
What we do
- Agree with you which findings to fix first
- Explain each change to your IT provider or team, with the reasoning and the safe way to make it
- Answer their questions while they work through the changes
- Retest each fixed finding to confirm it is resolved
What you receive
- Remediation guidance for your IT provider or team, in priority order
- A retest of the original findings, showing which are resolved
What happens afterward?
Anything the retest shows as unresolved goes back on the list, ranked by risk. If you want help keeping security on track after that, a Virtual Security Architect or vCISO arrangement picks up from here.
How the engagement works
Free consultation
A 45-minute call with a senior consultant about your situation. It is a conversation, not an assessment. You leave with a recommended next step.
Agree the order
We agree with you which findings to fix first. Your IT provider or team makes the changes.
Guide the changes
We explain each change to whoever makes it: what to change, why, and how to do it safely and in priority order.
Retest
We check each fixed finding again to confirm it is resolved.
