Notify risk owners about vulnerabilities 30 days before due

Your vulnerability tickets sit unacknowledged, risking missed remediation and compliance gaps. Risk analysts receive owner confirmations so issues are resolved or accepted before the next review.