A data-informed prioritization strategy is integral to ensuring remediation efforts are practical — and severity does not always mean priority.