Cesar Navas

The NIA Policy v2.0 requires that agencies include a comprehensive information security program in the development of software and acquisition. Tenable recommends using risk-based vulnerability management in conjunction with NIAv2 compliance efforts. The NIA Secure Software Summary dashboard can assist the organization by identifying vulnerabilities and events associated with weak programming practices.

The National Banking and Securities Commission (CNBV) Annex 72 is a collection of 30 Key Risk Indicators (KRI) that establish compliance standards for financial institutions operating in Mexico. The KRIs cover several topics such as secure management, vulnerability management, user and access management, anti-malware and obsolete or outdated software.

The CNBV Annex 72 contains 30 KRIs to which executives are required to measure compliance. Tenable.sc provides enhanced methods to correlate vulnerability data to align with said KRIs. This report pulls together several of the key grouping based on assets type and risk levels to help the executive team understand the current state of the Vulnerability Management program.

The CNBV Annex 72 is a collection of controls that establish compliance standards for financial institutions operating in Mexico. Software management is a strategic metric used to monitor risk mitigation efforts. This dashboard provides institutions with several data indicators related to unsupported products or hosts within the network.