The four steps in remediation are: 1) Find. This is best done through a vulnerability management solution or penetration testing. 2) Prioritize. Determine which vulnerabilities present a real and present security risk, and which are low priority or cannot be addressed.  3) Fix. This includes adding patches, updating software or blocking vulnerabilities to mitigate risk. 4) Monitor. Vulnerability mitigation is ongoing. Finding automated tools that deliver alerts and notifications at scale will help.