| Finding | Severity | Owner | Target Date | Mitigation / Compensating Control |
|---|---|---|---|---|
| Example: Missing input validation on endpoint X | High | Backend Team | 2025-10-01 | Add input schema validation + tests; WAF rule temporary |
POA&M Template
| Finding | Severity | Owner | Target Date | Mitigation / Compensating Control |
|---|---|---|---|---|
| Example: Missing input validation on endpoint X | High | Backend Team | 2025-10-01 | Add input schema validation + tests; WAF rule temporary |