Home / Compliance / Corrective Action Plans
Corrective Action Plans
Plans linked to controls and vulnerabilities
| # | Name | Initiated From | Linked Controls and Vulnerabilities | Priority | Owner(s) | Target Date | CAP Status | Deadline Status | |
|---|---|---|---|---|---|---|---|---|---|
| CAP-001 | Remediate SQL injection in portal search | Vulnerability — VUL-001 | 0 controls, 1 vulnerability | Critical | YKYousef Karim | November 30, 2026 | In Progress | On Track | |
| CAP-002 | Upgrade vulnerable Java dependencies | Vulnerability — VUL-002 | 1 control, 2 vulnerabilities | High | DBDaniel Brooks | December 20, 2026 | Active | On Track | |
| CAP-003 | Harden VPN TLS configuration | Vulnerability — VUL-003 | 0 controls, 1 vulnerability | Medium | OHOmar Haddad | October 15, 2026 | Completed | Closed | |
| CAP-004 | Fix HR export authorization | Vulnerability — VUL-004 | 0 controls, 1 vulnerability | High | SNSara Nasser | November 20, 2026 | Completed | Closed | |
| CAP-005 | Quarterly patch compliance uplift | Framework Control — ECC-2-3-3 | 1 control, 1 vulnerability | High | LFLina Farouk | October 31, 2026 | In Progress | Overdue | |
| CAP-006 | Standardize API error handling | Vulnerability — VUL-009 | 1 control, 0 vulnerabilities | Low | MCMaya Chen | February 15, 2027 | Draft | On Track | |
| CAP-007 | Retire legacy FTP services | Vulnerability — VUL-099 | 1 control, 0 vulnerabilities | Medium | LFLina Farouk | December 5, 2026 | Under Review | On Track | |
| CAP-008 | Vulnerability management process improvement | Audit Note — AN-014 | 1 control, 0 vulnerabilities | Medium | OHOmar Haddad | January 31, 2027 | Active | On Track | |
| CAP-009 | Metadata catalog rollout | Framework Control — MCM.MQ.2 | 1 control, 0 vulnerabilities | High | MCMaya Chen | December 3, 2026 | Active | On Track |
Go toPage
Rows1-9 of 9