<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Risk-Acceptance on t0ul</title><link>https://t0ul.com/tags/risk-acceptance/</link><description>Recent content in Risk-Acceptance on t0ul</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Sat, 26 Sep 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://t0ul.com/tags/risk-acceptance/index.xml" rel="self" type="application/rss+xml"/><item><title>The Risk Rancher Field Manual, Ch. 8: Accepting Reality</title><link>https://t0ul.com/blog/risk-rancher-field-manual-ch8/</link><pubDate>Sat, 26 Sep 2026 00:00:00 +0000</pubDate><guid>https://t0ul.com/blog/risk-rancher-field-manual-ch8/</guid><description>&lt;p&gt;&lt;em&gt;Part of &lt;a href="https://t0ul.com/blog/risk-rancher-field-manual-intro/"&gt;The Risk Rancher Field Manual&lt;/a&gt;, a hands-on guide to starting, scaling, and running a vulnerability management program.&lt;/em&gt;&lt;/p&gt;
&lt;p&gt;Not every finding gets fixed, and not every finding gets fixed on time. Anyone who tells you otherwise is running a program on a slide, not inside a real company with deadlines and legacy systems and humans. The mark of a mature program is not zero unfixed findings. It is that every unfixed finding is unfixed &lt;em&gt;on purpose, on the record, and on a clock.&lt;/em&gt;&lt;/p&gt;</description></item></channel></rss>