各种规模的企业都积极接纳数字化转型，以建立新的业务模式和生态系统，提供新的产品和服务，并在数字经济中更高效地运营。新的数字计算平台和发展转变如云、移动、SaaS 和 DevOps 等，使得在一天之内即可将概念变成实际能力。从公司会议系统到电网等所有类型的实体设备和系统，现在都已联网并可编程，为数字化转型创造了更大的机遇。
有些人说，这些数字技术是未来。但事实是，未来就在此时此地。到 2019 年，在企业中将部署超过 90 亿物联网 (IoT) 设备，超过 90% 的企业将在今天的云中运行应用程序。
The tools and approaches organizations are using to understand cyber risk don’t even work in the old world of client/server, on-premises data centers and a linear software development lifecycle where there is less complexity and more control over security.现在，资产已不仅仅是一台笔记本电脑或服务器那么简单。它们是数字计算平台和资产的复杂组合，代表着您的现代攻击面，资产及其相应的漏洞风险就像活着的有机体，不断地延伸、收缩和演变。
这一弹性攻击面在企业于任何特定时间真正了解自身Cyber Exposure的能力中造成了巨大缺口。我们称之为Cyber Exposure风险。
Throw 100s of security tools at the problem to protect from the ‘threat of the week’, creating siloed visibility, management overhead and reactive firefighting.
Rely on a CMDB to get visibility into asset configuration, but 85 percent of these projects fail in part due to stale data and they weren’t built to discover and map today’s modern assets.
Take a ‘scan the network’ approach to identify vulnerabilities.While this is foundational to understanding your cyber exposure gap, the old “one size fits all” techniques and tools haven’t adapted for the modern attack surface.
Cyber Exposure is an emerging discipline for managing and measuring cybersecurity risk in the digital era.Cyber Exposure transforms security from static and siloed visibility into cyber risk to dynamic and holistic visibility across the modern attack surface.Cyber Exposure translates raw vulnerability data into business insights to help security teams prioritize and focus remediation based on business risk.Cyber Exposure provides executives and boards of directors with a way to objectively measure cyber risk to help guide strategic decision making.Just as other functions have a system of record - including ITSM for IT and CRM for Sales - Cyber Exposure solutions will provide Security with a system of record to help them effectively manage and measure cyber risk.
Cyber Exposure builds on the roots of Vulnerability Management, designed for traditional assets such as IT endpoints and on-premises infrastructure, moving from identifying bugs and misconfigurations and expanding to the following:
Live discovery of any digital asset across any computing environment
Prioritization of remediation based on business risk
Benchmarking of cyber exposure compared to industry peers and best in class organizations
Measurement of Cyber Exposure as a key risk metric for strategic decision support
Addressing the full
Identify and map every asset across any computing environment
Understand the cyber exposure of all assets, including vulnerabilities, misconfigurations and other security health indicators
Understand exposures in context, to prioritize remediation based on asset criticality, threat context and vulnerability severity
Prioritize which exposures to fix first, if at all, and apply the appropriate remediation technique
Measure and benchmark cyber exposure to make better business and technology decisions
will be able to confidently answer four questions at all times:
Learn more about Tenable.io Lumin, the new Tenable solution that for the first time empowers CISOs to confidently visualize, analyze and measure cyber risk.With the industry's first Cyber Exposure command center, Tenable is arming CISOs to quantify and benchmark their Cyber Exposure.了解更多