Cyber Exposure company, Tenable revealed new innovations to its cyber exposure analytics capabilities in Tenable Lumin. These new innovations will leverage machine learning to automatically correlate vulnerability and threat data together with asset criticality in a single platform. Organizations can accurately score, trend and benchmark their cyber exposure based on the likelihood the exposure will be exploited and the business criticality of the impacted assets.
These new innovations will enable organizations to evolve from a technology – to a risk-based approach to prioritize remediation, communicate to the business and make data-driven decisions to reduce cyber risk.
Following are the innovations for Cyber Exposure analytics via Tenable Lumin:
1. Cyber Exposure Score:
The Cyber Exposure score is an objective measure of cyber risk, derived through data science-based measurement of vulnerability data together with threat intelligence and asset criticality. The score is automatically generated through machine learning algorithms which combine the Tenable Vulnerability Priority Rating (VPR), for the likelihood of exploitability, with the Tenable Asset Criticality Rating (ACR), for the business criticality of the impacted asset. Organizations can also leverage scoring to trend improvement over time as a measure of security program effectiveness.
2. Cyber Exposure Benchmarking: Organizations can use the score to benchmark themselves against industry peers and measure their overall cyber risk posture. Tenable has the industry’s most extensive vulnerability intelligence, processing over 1.5 billion instances of vulnerabilities per week, which is coupled with data science to create its benchmarking knowledge base. Organizations can also drill down to benchmark internal groups against each other by business unit or geography, for example.
3. Remediation Guidance Workflow: Security teams will receive a list of the top recommended remediation actions to reduce the organization’s cyber exposure. For additional information, teams can drill down into specific vulnerabilities or assets for business and technical context to enable more effective remediation.
“As Cyber Exposure continues to rise in strategic importance, the fundamental question facing organizations is ‘how secure are we?’ These innovations fill a huge void in the industry by enabling organizations to apply business impact and risk data to answer this question with confidence,” said Ofer Ben-David, Chief Product Officer at Tenable. “Extending our deep expertise in vulnerabilities to create an objective measure of cyber risk will help transform how cyber-related technology and business decisions are made.”
