The SLA applied by TVM team on IT resource users is 90 days.
All the issues open on the 1st day of the quarter has to be stored (Issue, Action, start date, Due Date, Title, Pending with, Owner by Org, Owner etc.,). The same vulnerabilities/issues will be tracked on the 1st day of next quarter and a comparison report should be generated.
This comparison can be grouped by by asset-vulnerability-org combination and should show statuses as of previous quarter vis-a-vis this quarter.
This above report is regulation mandated.