Improve Your Tenable Lumin Metrics

The following feature is not supported in Tenable FedRAMP Moderate environments. For more information, see the Tenable FedRAMP Moderate Product Offering.

If you want to improve the accuracy of your Tenable Lumin metrics and increase your overall vulnerability management health, evaluate your Tenable-provided values and your scanning strategy.

Important: Private findings are excluded from all scores in Tenable Lumin. For more information see Findings.

To improve the accuracy of your Tenable Lumin metrics:

  1. On the Assessment Maturity Details page, review your Assessment Maturity grade to evaluate your overall scanning health.

    Do any of the following, depending on what your data shows:

    Better overall scanning health results in a higher Assessment Maturity score.

    If you improve your Assessment Maturity score, you improve the accuracy of your Tenable-provided ACR and VPR values. Then, more accurate ACR and VPR values improve the accuracy of your AES and CES values.

  2. In the Assets table, review your Tenable-provided ACR values to evaluate the characterizations of the assets on your network. If the ACR values do not reflect the unique infrastructure or needs of your organization, you can override them. For more information, see Edit an ACR Manually.

    More accurate ACR values improve the accuracy of your AES and CES values.

  3. On the Remediation Maturity Details page, review your Remediation Maturity grade to evaluate your overall vulnerability remediation health.

    Do any of the following, depending on what your data shows:

    • Perform any actions described in the Recommended Actions widget.
    • View details about your Remediation Maturity remediation responsiveness grade in the Remediation Responsiveness Grade widget. If necessary, improve your remediation responsiveness grade by quickly remediating your most critical (highest VPR) vulnerabilities. For more information, see View Recommended Actions.

    • View details about your Remediation Maturity remediation coverage grade in the Remediation Coverage Grade widget. If necessary, improve your remediation coverage grade by increasing the number of vulnerabilities you remediate. For more information on the assets with the most critical vulnerabilities, see the Vulnerability Priority Rating (VPR) widget described in Vulnerability Management Dashboard.

    Better overall remediation health results in a higher Remediation Maturity score.