Vulnerability Management · Security Programs
Tenable / Nessus for ISO/IEC 27001:2022
What Tenable / Nessus’s data evidences toward ISO/IEC 27001:2022 today, and how to connect it.
What Tenable / Nessus evidences here
- Vulnerabilities feeds Technological Controls
This is where Tenable / Nessus’s data is documented as relevant on our ISO/IEC 27001:2022 page — not a pre-built, automatic control mapping. You configure which controls it maps to inside CMDash.
How you connect Tenable / Nessus
Scan findings and scanned assets from Tenable.io or Nessus, including how long findings have been open against your remediation SLA.
About ISO/IEC 27001:2022
The 2022 Annex A control set, with evidence mapped from your connected tools and a crosswalk that carries the same evidence into ISO 42001.
Annex A controls. Clauses 4–10 are not modeled as controls.