In Cenedril you track a vulnerability’s remediation under Documentation → Vulnerability Instances. You open an instance, move it through the Detected, Assessment, Decision and Resolution stages using the progress indicator, and keep an eye on the SLA deadline. When you close the instance, the status history records every step in an audit-proof form.
Get an overview
Open the vulnerability list
In the sidebar open Documentation and select Vulnerability Instances. The list shows every reported vulnerability with its status, severity, outcome and SLA deadline. Overdue and soon-due entries are sorted to the top.
Filter by progress
The All, Active and Closed tabs narrow the list. Active shows all still-open vulnerabilities, Closed the ones already finished. This makes it easy to see what is still being worked on.
Read status and deadline
The Status column shows the current stage: Detected, Assessment, Decision, Mitigating, Deferred or Closed. The SLA Deadline column shows the time remaining; once it has elapsed, Overdue appears in red. The Outcome column shows whether the vulnerability turns into a Change Request or has been deferred to Risk Management.
Track the remediation
Open the vulnerability
Click Details in the row. The detail page shows the severity at the top, a countdown to the SLA deadline when one is active, and below it the progress indicator with the stages Detected → Assessment → Decision → Resolution → Closed.
Move between stages
Click a stage you have already reached in the progress indicator to review its content. Completed stages are selectable, future ones stay locked until the previous one is finished. This lets you re-check, for example, the affected assets or the severity recorded during Assessment.
Track Mitigating
When the decision is Mitigate Now, the resolution stage shows the linked Change Requests with status Open or Closed. Each entry links straight to the matching item in change management, so you can see whether the fix is already done there.
Keep deferred vulnerabilities in view
When a vulnerability has been deferred to Risk Management, the resolution stage shows the recorded compensating measure and a note that the finding will feed into the next management review. Enter temporary countermeasures here and save them with Save measure.
Close the instance
Close the vulnerability instance
Once the fix is in place or the handover to risk management is documented, close the instance. For Mitigate Now this happens via Create Change Request & Close or Close without Change Request; for a deferred vulnerability use Close Vulnerability Instance.
Check the closure and history
A closed instance is read-only and marked Closed with a lock icon. The Status History at the foot of the page lists every status change with the person and a timestamp and can be expanded at any time.
Result: the vulnerability is marked Closed, its outcome (change request or risk management) is visible in the list, and the status history documents every step of the remediation in an audit-proof form.