Create Initiatives

In the Exposure Response section, your first step is creating an initiative. To do this, add the initiative, define the scope by selecting registries and/or pipelines, and choosing an SLA. Then, add combinations to define the vulnerabilities to track.

Example Initiative

To address recently exploited vulnerabilities on your Headquarters registry, you might create an initiative as follows:

  • Name — Recently exploited vulnerabilities at HQ

  • Asset Scope — http://localhost:5000

  • Remediate Within — 7 days

  • Combinations — Category is equal to Recently Actively Exploited AND VPR is greater than 6

Before You Begin

Before you create an initiative:

  • (Optional) Create custom combinations — If you plan to use custom combinations, create them.

Create a New Initiative

To create a new initiative:

  1. In the left navigation, click Exposure Response.

  2. In My Initiatives, click New.

    The Create New Initiative pane appears.

  3. Set the following options.

    Option Description
    Name Type a name for the initiative.
    Description (Optional) Type a description for the initiative, for example Reduce my external attack surface.
    Asset Scope Choose up to ten registries or pipelines to define which assets in your environment are in scope. Search for and select registries or pipelines to assign, for example EXAMPLE:https://example.com or EXAMPLE:https://192.0.2.202:5000.
    Remediate Within Choose an SLA by which all findings must be remediated. For example, to set an SLA of one week, enter 7.

  4. Under Assign Combinations, add up to ten combinations from the following tabs.

    Tab Description
    My Combinations Your personal combinations, which only you can view. You cannot assign personal combinations to initiatives you do not own.
    Shared Organization-wide combinations, which anyone can view or use and which your administrators and the combination owners can update. Updates may change the resources in your initiative. Track updates in the Combination Timeline.
    Tenable

    Predefined combinations from the Tenable Research Team. These may be updated infrequently, which can change the resources in your initiatives. Track updates in the Combination Timeline.

    Note: Initiatives can contain no more than 17 queries across all combinations. For example, if you add four combinations to an initiative—and the combinations have five queries each for a total of 20, a warning appears and you cannot save the initiative.

    Note: Initiatives with multiple combinations use a logical OR filter. The data displayed will include all results from each of the individual combinations.

  5. Click Save.

    The initiative appears in the My Initiatives panel.