If fixing a Vulnerable Item outweighs the benefits, the correct course of action is:
Mark the CI inactive in the CMDB and notify the CI owner
Record the accepted risk and Close/Defer the Vulnerable Item
Deprioritize the Vulnerable item Records (VlT) to push them further down the list so it can be ignored
Add the Cl to the Vulnerability Scanners exclusions Related List
Submit