How does your org handle NESSUS scans and remediation?

I'm looking for best practices to potentially alter how my org handles them. The scans run automatically over the weekend, great, but what we do with the reports seems far to manual. Identified vulnerabilities are uploaded to a database, where the dates of (1st, 2nd,...) notices sent to distributed admins responsible for the hosts are manually entered. A script is run to produce those email alerts, again with manual entries to question prompts. Finally, a ticketed is created for each …

blueteamsec nessus org remediation scans