Remediation Status and Defferal / Exception

[atariplayr]

I'm trying to understand how the Remediation Status is affected for Vulnerable Items (VIT) that are placed in a deferral status.
If the Vulnerable Item has a Remediation Status of "Approaching Target" and then the VIT is deferred, does the status remain as "Approaching Target" for the duration of the Deferral?

If it does remain the same and the deferral expires after the Remediation Target Date, will the VIT be immediately listed as "Target Missed," or does the counter continue where it left off when the Deferral was created?

[Simon Hendery · Accepted solution]

Hi @atariplayr 

Yes, generally speaking, if the VIT is in the 'Approaching Target' status at the time of deferral, it will remain in that status because it's unlikely anything will change, given it's been deferred.

Once the deferral expires, the VIT is evaluated against the Remediation Target Date. If the RTD has passed, the status will be changed/updated to 'Target Missed', otherwise it will remain as 'Approaching Target'.

[AC12]

this seems to also apply to VITs where the target missed status is set, then the VIT is put in a deferred state and still says target missed.

I would think there would be logic/available to modify so that when a VIT is put into Deferred state that it clears the Remediation Status field, additionally a VIT in a Deferred state should map to an exception so it would be even better to update the remediation target and status to align the the exception valid to date.