Corporate process for managing and resolving vulnerabilities identified in IT infrastructures, applications, and systems. Includes remediation workflows, coordination between technical and business teams, exception management, residual risk acceptance, and integration with corporate vulnerability management and change management processes.