Recently Viewed Topics
Create a Dispute
Note: This feature is not supported when deploying Tenable.io on-prem.
After a PCI scan is run, failures may be detected that must be disputed before an attestation request can be submitted. Users can create disputes in the PCI ASV workbench before sending to ASV Review. After the attestation request is in ASV Review, only responses to information requests may be added to the dispute.
To create a dispute:
- Click Dashboards > Workbenches > PCI ASV.
The PCI ASV Attestation Requests page appears.
- On the Remediation tab, select the scan for which you wish to dispute a failure.
The General Information page for the scan appears.
- Click the Undisputed Failures tab.
The Undisputed Failures page appears.
- Select the check box next to the undisputed failure you wish to dispute.
Note: You can bulk dispute failures that have the same plugin ID. In the top right corner of the page, filter the failures by plugin ID and then select the check boxes next to the failures you wish to dispute together.
- In the top right corner of the page, click the New Dispute button.
The Dispute page appears.
Note: By default, the Dispute Detail tab opens. To see more information about the failure, click the Failures tab.
- Configure the dispute:
- In the Name box, type a name for the dispute. By default, the name is automatically populated with a concatenation of the IP address and the Plugin ID associated with the failure.
- In the Reason section, select the reason for the dispute.
- In the Explanation box, type an explanation for the dispute.
- In the Evidence section, click Add File to add any evidence that supports the dispute.
Note: Evidence file size is limited to 10GB. You can add as many evidence files as needed. There are no restrictions on the file type that can be uploaded.
- From the Assigned To drop-down menu, select the user to which to assign the dispute.
Tip: Try assigning disputes to individuals on your team to divide up your remediation workload.
Note: To view more information about the plugin and better understand the failure, click the Plugin ID. You can copy and paste content from the plugin detail into the explanation field to better define the dispute.
- Click Save.
The dispute saves and can be viewed on the Disputes tab for the scan.