What should I do after a scan?

Review the top findings, validate evidence, assign owners, fix high-priority issues, document changes, retest, and monitor for drift or recurrence.