-
Notifications
You must be signed in to change notification settings - Fork 42
Description
Is your feature request related to a problem? Please describe.
CISA's adoption of SSVC resulted in their own customized outcome set that they use internally. However, some of the terminology used is highly idiosyncratic to their particular environment as a CSIRT with National Responsibility. In particular, terms like "Track *" have no significant meaning outside of their environment.
We include in our code and documentation examples derived from CISA's SSVC implementation. However, it's not necessary for us to retain their exact terminology if we can generalize concepts to be more applicable to other users of SSVC.
Describe the solution you'd like
The suggestion here is to replace "Track *" with something more generally understood, like "Monitor".
Additional context
This change would require us to modify at least:
- the json representation of the CISA model
- the CISA outcome group in the python code (which will flow down to the examples in https://certcc.github.io/SSVC/reference/code/outcomes/?h=cisa )