This connector feeds your Tenacy compliance score into Citalid's Defense Profile. The Defense Profile is Citalid's indicator representing an asset's maturity level against cyber risks. With this connector, you factualize and accelerate your risk analyses by reusing the management data already available in Tenacy, with no manual re-entry needed.
Connector capabilities
On Citalid’s side
You can link an asset's Defense Profile in Citalid to a Tenacy Perimeter (the organizational, technical, or supplier entity that your measures and evaluations are attached to in Tenacy). The relationship is one Tenacy perimeter to one Citalid asset.
Once this link is established, the asset's defense level is automatically and periodically updated based on the score provided by Tenacy, removing the need to declare it manually in Citalid.
On Tenacy’s side
Citalid periodically sends the following information to the Tenacy application:
Security control recommendations (for linked assets)
Risk qualifications
Users will then find all this information directly within their Tenacy platform, in the gap register chosen during configuration (see below).
Set up the Tenacy connector
As an admin, in the Settings section, under the "Global Configurations" tab:
External Apps > Tenacy > + Add a configuration
2. Give a name to the configuration and add the information provided by Tenacy
⚠️ Make sure you use the right Tenacy API URL (and not https://lab.tenacy.io/). In practice, it may differ from one Tenacy client to another, but for this example we are using this one: https://api.lab.tenacy.io/
3. Select the gap register in the Tenacy application where you want to find the recommendations sent by Citalid. This is the same type of register used by other Tenacy connectors to centralize detected gaps.
Your connector is now configured!
Use the Tenacy connector to assess your assets’ maturity
As a manager or an operator, in the Defense Profile section:
Edit > Step 2. Assessment > Select one or several assets
Select "Use a connector"
Choose Tenacy as the connector to use
Select the security framework (the Tenacy compliance policy the score is based on) from your Tenacy perimeter
Under the Connector configuration section:
Select the configuration created previously
Select the Tenacy perimeter you want to link to the asset
🔎If the security framework selected above is not the same one as that of the Tenacy perimeter, an error message will be displayed. Check that both frameworks match before submitting.
3. Manual evaluation (optional):
It is possible to manually evaluate certain controls to replace those coming from the connector (same procedure as the standard Defense Profile configuration).
Click on "Submit".
The asset's defense level is now based on the scores provided by Tenacy. The details of these scores are visible in the Defense Profile section.
Frequently asked questions
Can I link several Citalid assets to a single Tenacy perimeter?
No. The connector works on a one-to-one basis: one Tenacy perimeter corresponds to a single asset in Citalid.
What happens if I change the security framework after configuration?
The framework selected in Citalid must always match the one used by the linked Tenacy perimeter. If they differ, an error message is displayed and the score is not synced until both frameworks match.
Can I override some evaluations coming from the connector?
Yes, manual evaluation remains possible for certain controls, following the same procedure as a standard Defense Profile configuration, without needing to disable the connector.