Setting Practical Time Frames to Remedy Security Vulnerabilities