Skip to content

Create an example decision model that incorporates CVSS vector element decision points #724

@ahouseholder

Description

@ahouseholder

Is your feature request related to a problem? Please describe.

But we still don't have any examples of using CVSS vector elements in a decision model.

Describe the solution you'd like

This could be a tutorial either or a How-To, depending on whether the intended audience is novices or SSVC users, respectively.

It could also be part of an acuity ramp example.

Next step for this issue is to determine what the plan is:

  • identify a stakeholder and a decision they are making
  • choose a target audience (novices or experienced) to decide between Tutorial and How-To framing
  • create a new decision model (or choose an existing one to adapt) that incorporates a couple CVSS-based decision points
    • The CVSS supplementals Automatable, Value Density, and Safety are obvious overlaps with existing SSVC concepts, but it'd probably be more effective if we also included one or more CVSS vector elements that aren't such close analogs.

Additional context

Metadata

Metadata

Assignees

No one assigned

    Labels

    content/semanticChanges to the semantic content of the SSVC documentationenhancementNew feature or request

    Type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions