Prioritize Risk with Initiatives
The hard part of security isn't finding issues, it's knowing which to fix first. Initiatives is Mondoo's answer: a curated list of the 30 fixes that will most improve your Space Risk Score. Instead of triaging thousands of alerts, you work down a short, ranked list.
What's on the list
Each Initiative is a single finding (misconfiguration, CVE, or vendor advisory) ranked by how much fixing it would reduce risk across the space. The list shows two metrics for each item:
-
Risk Reduction. The exact amount your Space Risk Score improves when this finding is fixed across every affected asset. See How Risk Reduction is calculated.
-
Effort. The estimated time to remediate, shown as both the industry-standard manual effort and the time required with Mondoo's automated remediation, with an
X FASTERmultiplier. See How Effort is calculated.
Find Initiatives
In the Mondoo App, open the Dashboard. The Initiatives for risk reduction panel lists the highest-impact fixes, ranked with the most impactful at the top. Select View initiatives to open the full list.
Work the list
-
Read the top item. Note its Risk Reduction (how much your score drops if you fix it) and its Effort (how much time it takes).
-
Spot the quick wins. Scan the list for high Risk Reduction paired with low Effort. These deliver the most return for the least work.
-
Update Status. Each Initiative has a Status field you can update as work progresses:
Status Meaning Not Started Default. Remediation hasn't begun. In Progress Remediation is actively underway. Ticketed A ticket has been created to track the work. Fixed The finding is fully remediated. Canceled The finding will not be remediated. -
Plan with the numbers. Use Risk Reduction and Effort to plan sprints, justify resource allocation, and assign work.
By working down the list, you keep your team focused on the changes that actually move the score.
How it all fits together
Next step
Once you know which fixes matter most, track and fix the findings by routing remediation into your ticketing system.