Automating ISO/IEC 27002 Requirements with Tenable SecurityCenter Continuous View®

Learn how Tenable helps you streamline conformance, communicate results and demonstrate defensible security

By reading this paper you will learn how Tenable SecurityCenter Continuous View® supports ISO/IEC 27002 Information technology – Security techniques – Code of practice for information security controls. Specifically, it explains how SecurityCenter Continuous View automates and assesses technical controls in the following ISO 27002 clauses:

• Asset Management
• Access Control
• Operations Security
• Communications Security
• System Acquisition, Development and Maintenance
• Information Security Incident Management
• Compliance

Beyond technical control automation and assessment, the paper describes ways you can improve communication and organization-wide reporting using the dynamically generated reports, dashboards and Assurance Report Cards (ARCs) included with SecurityCenter Continuous View.