As a vendor, you may receive remediation requests from your customers, referred to as Requestors, through the Titan Secure platform. Requestors are typically Vendor Risk Managers (VRMs) who use Titan Secure to communicate remediation priorities, monitor progress, and collaborate with your organization on resolving security findings.
This article explains how vendors can use Titan Secure to review remediation requests, take action on assigned findings, and update finding statuses to reflect progress and resolution.
Vendor Risk Manager (VRM) actions
Vendor Risk Managers (VRMs) can take actions on findings to communicate remediation priorities and expectations to your organization. These actions determine which findings require attention and may affect how you respond and update statuses in Titan Secure.
To learn more about the available action types and how to use them, see Take action on findings.
Manage your findings
You can use the Open page to view and manage all security findings that your customers have flagged or actioned. This page provides a centralized view of findings that require your attention, including those associated with active remediation requests.
From the My Findings table, you can:
- Review finding details, including type and threat level
- See how many customers (Requestors) have flagged the same finding
- Track findings that are pending action or pending approval
- Filter, search, and group findings to prioritize remediation work
Use this view to focus on high-impact findings, track remediation progress across requestors, and ensure that statuses accurately reflect each issue's current state.
Respond to remediation requests
You can update the status of a single finding or select multiple findings for bulk updates directly from the Titan Secure platform.
- From the My Findings table, open a finding group row to view the individual findings within that group.
- Select one or more findings and then choose Update Status from the Actions menu.
- Select the response you want to submit. For more information about each option, see Vendor responses and status lifecycle.
-
(Optional) Add a comment describing the status and attach any supporting documents, then select Respond.
Note: Comments are public and viewable to anyone following your scorecard.