Configuration & Patch Auditing

Tracking Microsoft Security Bulletins Dashboards

by Cody Dumont
July 8, 2014

Tracking Microsoft Security Bulletins Dashboard Screen Shot
One of the most difficult tasks in information security is patch management. SecurityCenter customers have an advantage over other IT professionals; this series of dashboards can help IT professionals understand the true state of Microsoft patch management.

MAS TRM Guidelines

by David Schwalenberg
July 2, 2014

The Monetary Authority of Singapore (MAS) published new Technology Risk Management (TRM) Guidelines in June 2013. The MAS TRM Guidelines dashboard provides a high level overview of information relevant to specific sections in the TRM Guidelines.

Daily Usage Summary

by Michael Willison
June 27, 2014

Daily Usage Summary Dashboard screenshot
The Daily Usage Summary dashboard collects and displays daily information that the IT Security team should review frequently during the workday. These components are helpful in monitoring activity within the corporate network.

Unknown Process(es)

by Josef Weiss
June 17, 2014

Unknown Process Dashboard Image
This dashboard displays unknown processes, Microsoft Windows autoruns, gray area processes, and known installed software across a series of components.

SEC Risk Alert

by David Schwalenberg
June 11, 2014

SEC Risk Alert Dashboard Screenshot
On April 15, 2014, the U.S. Securities and Exchange Commission’s Office of Compliance Inspections and Examinations (OCIE) issued a Risk Alert describing its Cybersecurity Initiative "to assess cybersecurity preparedness in the securities industry." This dashboard presents network information that can assist organizations in evaluating and improving their cybersecurity preparedness.

SCAP Audit Summary

by Cody Dumont
April 15, 2014

The Security Content Automation Protocol (SCAP) is a mixture of community developed security specifications. SecurityCenter users are able to embrace the NIST security automation agenda through more efficient use of devices with SCAP audit file support, and advanced reporting using the dashboards and reports native to SecurityCenter.

PCI Status

by Josef Weiss
March 25, 2014

This dashboard leverages Nessus PCI system configuration results to track which PCI controls are compliant or non-compliant. As such, a PCI Audit Policy must be used to achieve results. Audit files are available for download via the Tenable Support Portal for a variety of operating environments.

Cybersecurity Framework Audit Dashboards

by Cody Dumont
March 4, 2014

Cybersecurity Framework Audit Summary
SecurityCenter and Nessus have the ability to check compliance status using the audit files. With native flexibility of all Tenable products, SecurityCenter is able to report on the compliance status of the Cybersecurity Framework using the compliance data previously collected. This dashboard provides two views of compliance data. One view includes ration bars indicating ratio of checks to status of the check. The other data set shows a matrix of the compliance check status.

Compliance Summary

by Cody Dumont
February 20, 2014

Compliance Summary Screen Shot
SecurityCenter and Nessus have to ability to check compliance with a variety of standards including HIPAA, NIST 800-53, PCI DSS, and DoDI 8500.2. This dashboard shows the security manager a summary of the current compliance status.