Reporting Tickets

For each finding you cannot resolve, provide the security team with a summary of the issue including:

■

The finding and the related component.

■

Why it cannot be exploited here, listing the NSG rule or the WAF setting that blocks it.

■

The compensating controls: WAF in prevention mode, NSG, admin access only through Bastion or VPN

■

The date it will be patched, or the reason it will not be patched.