PHASE 03 · REMEDIATE
Implement and document
REMEDIATE executes the plan instead of producing another plan. We implement the agreed work packages, write the operating documentation, collect control-mapped evidence, and show what is closed, open, blocked, or escalated.
WHAT THIS PHASE ESTABLISHES
Execute the accepted plan and produce evidence that proves implementation. REMEDIATE is where policies become operating behavior, control narratives become evidence, and the gap register becomes a managed burn-down.
An SMB with an accepted remediation roadmap, named owners, budget, access, and a defined set of controls, procedures, or evidence packages to implement.
Implemented systems and the evidence that proves them: an evidence repository indexed control by control, and a live burn-down showing what is closed, open, blocked, or escalated. Not another plan.
STANDARD ARTIFACTS
What the phase produces.
The exact phase boundary and the client inputs are documented before work begins. These are the artifacts that define acceptance.
Implementation tracker
Work-package status and blockers.
Policy and SOP package
The operating documentation itself.
Evidence repository and index
Evidence mapped to the control or objective it supports.
Residual gap register
Open items with aging, owner, and next action.
Program-build evidence
Access, marking, screening, and program-setup evidence where those domains are in scope.
Execution procedures and flow-down register
Implemented procedures, flow-down controls, and closeout checklists.
PROGRAM-BUILD DOMAINS IN THIS PHASE
The five domains, at REMEDIATE depth.
Each domain threads all five phases but is separately scoped. What happens here is only what this phase owes the domain, not the whole build.
Export control
Export control — technology and access control, restricted-party screening, marking, and recordkeeping implemented.
Document control
Document control — deployment: marking scheme, registers, distribution, storage boundaries, and decontrol.
Access control
Access control — implemented with evidence. Never claimed without an operating control.
Program setup
Program setup — policy, training, and incident response implemented.
Execution evaluation
Execution evaluation — procedures, flow-down controls, and closeout checklists implemented.
LIMITS THAT APPLY HERE
No phase guarantees an outcome.
PHASE 03 OF 05 · The LFC OORAH Framework
NEXT STEP
Ready for REMEDIATE?
Every engagement starts with a conversation about the route, not a price list. Tell us the target contract and where you think the gaps are.
A 30-minute introductory call. Bring the target solicitation and what you already know about your gaps.
VOSB + SDVOSB CERTIFIED (SBA VETCERT) · UEI VU2HV8458J93 · CAGE 21BA0