Remediation Services

The purpose of Security Remediation Services is to help the University of Louisville community respond to, resolve, and recover from identified security vulnerabilities, incidents and threats. These services ensure that university systems, data and operations are restored to a secure state and that risks are effectively mitigated in compliance with institutional, state and federal security policies.

Overview of Service

Security remediation is coordinated by ITS Enterprise Security. The team provides expertise, tools and hands-on support to remediate vulnerabilities, contain and recover from security incidents, and implement corrective actions. Services include vulnerability patching, system hardening, incident containment and guidance for long-term risk reduction.

Key Features:

• Vulnerability remediation for enterprise systems and applications
• Incident containment and recovery support
• System hardening and configuration changes
• Coordination with departmental IT teams for remediation actions
• Documentation and reporting for compliance and audit purposes
• Follow-up assessments to verify remediation effectiveness

Benefits:

• Rapid resolution of security risks and incidents
• Reduced likelihood of future breaches or system compromise
• Enhanced protection for university data and operations
• Compliance with institutional and regulatory requirements
• Support for a resilient and secure campus environment

Intended Audience:
Faculty, staff, departmental administrators and technology professionals responsible for managing university systems, data or processes.

Service Details

• Core Activities:

  • Remediate vulnerabilities identified through scans or assessments
  • Contain and recover from security incidents
  • Implement system hardening and configuration changes
  • Provide guidance and support for remediation planning
  • Document remediation actions and report to stakeholders
  • Conduct follow-up assessments to ensure effectiveness

• Performance Metrics:

  • Time to remediate vulnerabilities and incidents
  • Number of successful remediation actions completed
  • Reduction in recurring vulnerabilities or incidents
  • User satisfaction and feedback

• Collaboration:
  Managed by ITS Enterprise Security in partnership with departmental IT staff and university leadership.

Boundaries and Constraints

• Remediation actions may require departmental resources or approvals.
• Some vulnerabilities or incidents may require system downtime or service interruptions.
• Documentation and reporting are required for compliance.
• Non-remediation of identified risks may result in disciplinary action or regulatory penalties.

How to Get Support

• Submit a Request: Use the ITS Helpdesk or online forms to initiate a remediation request
• Contact ITS Enterprise Security: Email secureit@louisville.edu for remediation questions or incidents
• Access Documentation: Review Security Operations guides and compliance standards for remediation best practices
• Departmental Support: Coordinate with your unit’s IT representative for planning and implementation