A Service Level Agreement (SLA) is the document used to specify due dates for the remediation of high- and critical-priority findings. SLAs outline the responsibilities of the service provider, including time frames for addressing issues or vulnerabilities, based on their severity. By setting clear timelines for remediation, SLAs ensure that critical security vulnerabilities are addressed in a timely manner. CASP+ emphasizes the importance of SLAs in maintaining accountability for security operations and ensuring compliance with organizational security policies.
References:
CASP+ CAS-004 Exam Objectives: Domain 1.0 - Risk Management (SLAs and Security Management) CompTIA CASP+ Study Guide: SLAs for Security Vulnerability Management