Prepare Report Artifacts for an Audit

Objective

Generate a snapshot of your security posture to demonstrate compliance or progress to auditors and executive leadership.

Prerequisites

  • Create and apply the appropriate asset tags to the assets included in the audit (for example, "PCI-DSS-Assets" or "Region-NorthAmerica").

  • Optionally, edit your remediation SLAs to better reflect your business needs. While these settings exist in the Exposure View section of the application, the SLA settings apply to the data on all dashboards and widgets.

Step 1: Define the Audit Scope

  1. Log in to Tenable Exposure Management.

  2. In the left navigation menu, click Analytics > Dashboards.

    The Dashboards page appears.

  3. Click Create new Dashboard.

  4. Follow the steps to create a new dashboard.

  5. Include the SLA Compliant Assets widget.

    Tip: Optionally, you may also choose to include the SLA Compliant Assets (Percentage) and/or SLA Compliant Assets Over Time widgets.

  6. In the Filters section, search for and apply the appropriate Tag Name filter for the asset tags to include in the audit.

    All widgets on the dashboard recalculate to reflect only the assets within the audit scope.

  7. Click Create.

  8. Tenable Exposure Management creates the dashboard and you navigate directly to the dashboard’s landing page.

Step 2: Generate the Report Artifact

  1. At the top of the page, click Actions > Export.

  2. Select the format in which you want to export the dashboard data.

    A confirmation message appears. When the export completes, you receive an email with the exported data in the selected format.

  3. Share the exported content with the appropriate stakeholders.