Which of the following is one of the three steps of remediation?

• A. Implement and apply additional security controls
• B. Posture for remediation
• C. Detect and alert
• D. Execute remediation

Answer: (B)

Remediation typically unfolds in a planning-then-action-then-validation sequence. The first phase is to posture for remediation: set the scope, gather data, confirm backups and rollback options, secure approvals, and outline a concrete remediation plan. This preparation ensures you know exactly what you’re fixing, how to fix it safely, and how you’ll verify the outcome, reducing the risk of introducing new issues during the fix.

So, choosing to posture for remediation aligns with that initial preparation step: getting everything ready and defined before you execute any fixes. Detecting and alerting belongs to discovery/monitoring, not the remediation plan; executing remediation is the actual fix, a separate action step; implementing additional security controls is typically part of hardening that may follow remediation, not the preparatory phase itself.