Security Debt
Unresolved cybersecurity work, treated like debt
Overdue findings, old unresolved vulnerabilities, recurring issues, unverified assets and expired risk acceptances all accrue Security Debt — and it compounds the longer it's ignored.
Debt increases with
- • Overdue findings
- • Old unresolved vulnerabilities
- • Recurring issues
- • Unresolved critical findings
- • Unverified assets
- • Expired risk acceptances
Debt decreases when
- • Vulnerabilities are resolved
- • Assets are secured
- • Recurring issues stop returning
- • Overdue remediation completes
- • Risk controls improve
Visible by business unit
Current debt, debt added this month, debt removed, oldest unresolved item, and the highest-debt asset — broken down by business function, with trend charts.