Documents the verification of a remediation and whether the vulnerability can be closed. The closure recommendation follows the verification result you give: a vulnerability is never declared fixed without one.
Contents
1. Document Information
2. Verification Scope
3. Original Vulnerability Information
4. Remediation Action Summary
5. Verification Methodology
6. Verification Results
7. Evidence References
8. Residual Vulnerability Analysis
9. Outstanding Issues
10. Recommended Additional Actions
11. Closure Recommendation
12. Reviewer and Approval
13. Verification History
What you provide
Deliverable — You set its title, author and structure.
Verification — What was checked, by whom.
Original vulnerability — Filled from a selected register when left empty.
Remediation performed — What was changed.
Verification results — As observed: the conclusion follows from them.