Andrew Freeborn

In today’s world of more connected “everything”, organizations are making more business-centric services available across the internet. With more of the company’s services offered via the internet, there is an inherent risk for more vulnerabilities and exploitation. This dashboard can assist analysts to ensure that vulnerabilities with web services from multiple vendors are detected across the organization.

Most organizations have a method in place for identifying all of the vulnerabilities in operating systems, applications, and hardware in the environment. Typically, analysts have a fairly good awareness of most of the vulnerabilities in the environment. This report assists analysts by providing an executive report from all Tenable Nessus and Tenable NNM plugin families.

Vulnerabilities discovered within software can be the result of insecure coding practices used during the development process. When a vulnerability exists as a result of a design decision by an operating system vendor, these problems can put organizations at a greater risk on a larger scale. This report can assist analysts by quickly identifying instances where services on Microsoft Windows are running without unquoted file paths.

Tools to create web content and websites can often be overlooked as they are usually not a common piece of software across an enterprise. As a result of being overlooked or older versions used to maintain legacy content, web development tools can contain vulnerabilities. This dashboard can identify web development tool vulnerabilities on the network to reduce the threat to the organization.

When systems do not have accurate and reliable log information, organizations could loose sight of significant events that can lead to increased risks. Without proper audit logging, organizations won’t have the audit trail information needed to quickly address issues before, during, or after an event has occurred. Organizations can utilize the ISO Continuous Monitoring report to monitor and obtain continuous events information such as unusual network activity, high usage events, and suspicious events on network devices and services.