# The weekly loop

Pin this where you will see it. Run it every week.

- [ ] Ingest. Pull the new findings. Drop the exports in, or let the API feed them.
- [ ] Kill noise. Confirm or cut the false positives. Write down every kill so it stays dead.
- [ ] Dedup. Collapse the same fix across many hosts into one unit of work.
- [ ] Score with context. score = base x exposure x criticality. Known-exploited jumps to P1. Rank the list.
- [ ] Ticket the top. Four questions, a named owner, a verify step, an SLA clock (P1 3d, P2 14d, P3 30d, P4 90d).
- [ ] Verify. Re-scan or re-test before anything is called closed. Trust, but verify.
- [ ] Accept on the record. Exceptions and extensions get an owner, a reason, a compensating control, and an expiry.
- [ ] Measure. MTTR by priority, SLA adherence, exception volume. Watch the arrow, not the pile.

Work the top of the list, not the pile.