-
Notifications
You must be signed in to change notification settings - Fork 42
Open
Labels
content/semanticChanges to the semantic content of the SSVC documentationChanges to the semantic content of the SSVC documentationenhancementNew feature or requestNew feature or request
Description
Is your feature request related to a problem? Please describe.
- Add CVSSv4 Decision Points #377 added CVSS-based decision points
- Add CVSS vector elements as decision point docs #691 added reference documentation for those decision points
But we still don't have any examples of using CVSS vector elements in a decision model.
Describe the solution you'd like
This could be a tutorial either or a How-To, depending on whether the intended audience is novices or SSVC users, respectively.
It could also be part of an acuity ramp example.
Next step for this issue is to determine what the plan is:
- identify a stakeholder and a decision they are making
- choose a target audience (novices or experienced) to decide between Tutorial and How-To framing
- create a new decision model (or choose an existing one to adapt) that incorporates a couple CVSS-based decision points
- The CVSS supplementals Automatable, Value Density, and Safety are obvious overlaps with existing SSVC concepts, but it'd probably be more effective if we also included one or more CVSS vector elements that aren't such close analogs.
Additional context
j---
Metadata
Metadata
Assignees
Labels
content/semanticChanges to the semantic content of the SSVC documentationChanges to the semantic content of the SSVC documentationenhancementNew feature or requestNew feature or request