Integration at a glance
| Item | Detail |
|---|---|
| Partner product | Tenable Security Center (on-premises) |
| Integration method | DeRISK reads Security Center data through its API. Read-only. The API connection needs no manual effort and keeps the data current for analysis. Manual import of API JSON output files is also supported, so the OT environment never needs a standing connection to DeRISK in the cloud. |
| Data used | Asset inventory, vulnerabilities |
| Built and supported by | DeNexus |
| Certification | Certified by Tenable |
| DeRISK grade supported | Level 4 · Evidence-Grade (facility data), as this grade becomes available |
The challenge
Security Center tells teams which vulnerabilities to fix first by technical risk. Executives ask a different question: what could they cost the business? Vulnerability counts and ratings do not answer it.
How it works
Security Center and its Nessus scanners find assets and vulnerabilities.
DeRISK CRQ reads that data on a schedule through the Security Center API.
DeRISK combines it with threat intelligence, each facility’s business data and, where available, network and firewall data.
DeRISK simulates how likely (frequency) and how severe (magnitude) cyber incidents could be, and reports the results in dollars.
What you get together
Risk in financial terms.
Expected annual loss and loss at higher confidence levels, by facility and company.
Vulnerabilities ranked by dollar impact.
Add business impact to technical priority.
Projects compared before you spend.
Test mitigation options and see the risk reduction of each.
When firewall data is available with vulnerability data, DeRISK uses the firewall data to determine which vulnerabilities are mitigated by its policies.
Requirements
- Tenable Security Center
- A read-only Security Center API account for DeRISK
- For automatic collection, a network path from DeRISK to Security Center (not needed for manual JSON import)
- A DeRISK CRQ subscription at Evidence-Grade, as this grade becomes available
About Tenable
Tenable® is the Exposure Management company. Approximately 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. As the creator of Nessus®, Tenable extended its expertise in vulnerabilities to deliver the world’s first platform to see and secure any digital asset on any computing platform. Tenable customers include approximately 60 percent of the Fortune 500, approximately 40 percent of the Global 2000, and large government agencies.