Overview
The Tentacle integration connects a Telivy Risk Assessment to a CIS Critical Security Controls compliance assessment. Telivy maps what its scans found on the client’s endpoints and cloud tenants onto the CIS safeguards, so the compliance assessment starts partly filled in instead of blank. The results appear on the assessment’s Compliance tab, with the status of each CIS control and the client’s overall CIS posture.The Tentacle integration is delivered through Unity and requires an active Tentacle
subscription for the client. If you do not have Tentacle enabled, contact
accounts@telivy.com.
What you get
Each client gets a CIS Critical Security Controls assessment covering all 153 safeguards. Telivy answers the safeguards it has scan evidence for, and the Compliance tab shows a CIS posture score with a breakdown per control.Requirements
Setup
Complete these steps in order, because each one depends on the previous one.1
Link the client to a Unity customer
Open the Risk Assessment and go to its integrations configuration. Link the client to the
matching Unity customer, or create the customer if it does not exist yet.
2
Confirm the Tentacle subscription
Verify that the linked Unity customer has an active Tentacle subscription. If it does not,
the assessment shows a prompt to activate one.
3
Grant access
Grant Tentacle access for the assessment.
4
Populate from scan findings
Telivy maps the assessment’s scan findings onto the CIS safeguards. Review the answers and
change any that are wrong.
Reviewing compliance
Open the assessment’s Compliance tab to see the CIS controls. You can filter by CIS category and review the status and severity of each safeguard, along with the overall posture. Until the Tentacle subscription and access are in place, the Compliance tab shows a setup prompt instead of live CIS data.FAQ
Which compliance framework does this cover?
Which compliance framework does this cover?
The CIS Critical Security Controls (153 safeguards). It is the only framework this
integration covers today.
Do I have to answer every safeguard manually?
Do I have to answer every safeguard manually?
No. Telivy fills in answers from the assessment’s scan findings wherever it has evidence.
You review those and answer the rest.
Why is my Compliance tab showing a setup prompt instead of controls?
Why is my Compliance tab showing a setup prompt instead of controls?
The tab is available for every Risk Assessment, but live CIS data requires a linked Unity
customer with an active Tentacle subscription and access granted. Once the four setup
steps on this page are done, the controls appear.