Tenable / Nessus for FFIEC Cybersecurity Assessment Tool
What Tenable / Nessus’s data evidences toward FFIEC Cybersecurity Assessment Tool today, and how to connect it.
What Tenable / Nessus evidences here
- Vulnerabilities feeds Cybersecurity Controls
This is where Tenable / Nessus’s data is documented as relevant on our FFIEC Cybersecurity Assessment Tool page — not a pre-built, automatic control mapping. You configure which controls it maps to inside CMDash.
How you connect Tenable / Nessus
Scan findings and scanned assets from Tenable.io or Nessus, including how long findings have been open against your remediation SLA.
About FFIEC Cybersecurity Assessment Tool
The structure of the FFIEC Cybersecurity Assessment Tool, kept for banks and credit unions that assessed against it. The FFIEC retired the tool on 2025-08-31, so this is a legacy structure, not current guidance.
Component level only: the tool's declarative statements by maturity level and its Inherent Risk Profile are not included, and the wording is CMDash's own. The FFIEC named NIST CSF 2.0 and the CISA Cybersecurity Performance Goals as current resources.