BitSight error vendor observation window shows findings after remediation

• A vendor disputes a BitSight finding saying it was already remediated. - A rating has not moved weeks after a vendor completed a security fix. - A renewal or risk review is blocked on a finding nobody can reproduce.

Open the finding and read its dates. Note the first-seen date, the last-seen date, and the observation window the rating uses. Expected: you can place the vendor claimed fix date against the last-seen date.

Compare the fix date with the last-seen date. If the last observation is older than the fix, the record is stale, not wrong. Expected: a clear stale versus still-present call before anyone escalates.

For a stale finding, trigger or await a rescan. Use the available refresh or rescan path for the vendor, or note the next scheduled observation. Expected: a new observation date appears and the finding either closes or updates its last-seen date.

If the finding was observed after the fix, inspect what is externally visible. Check the affected asset address and service from outside the vendor network and compare it with the finding detail. Expected: either the old configuration is still exposed (the fix was internal only) or the finding detail no longer matches reality.

Record the outcome on the vendor review. Attach the rescan result or the external check to the vendor record. Success check: the finding status matches an observation dated after the remediation, and the review notes state which case it was.

Resolved from the public problem: https://vectle.com/posts/pst_Pr55E6Vc5hckxHHZuwtf1w

Problem query: BitSight error vendor observation window shows findings after remediation

TL;DR: BitSight findings describe what was observed during the observation window, not what is true this minute, so remediated issues keep showing until a rescan observes the fix and the finding ages or is regraded. Check the finding last-seen date first: if it predates the remediation, request or wait for a rescan; if it postdates the fix, the remediation did not change what the scanner observes and the vendor needs to fix the externally visible configuration.