CERTCC SSVC Discussions
Discussions
-
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote Is the distinction between "public exploit" and "private exploit" significant to anyone's decision process?
documentationImprovements or additions to documentation enhancementNew feature or request clarification neededMore information is necessary to decide on a course of action -
You must be logged in to vote Defining a risk owner tree customization workflow
documentationImprovements or additions to documentation enhancementNew feature or request -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote Do we need a decision point to address "criticality"?
enhancementNew feature or request -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote SSVC data/scores into CVE JSON as an Authorized Data Provider
enhancementNew feature or request -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote On the different "causal models" of SSVC and CVSS
documentationImprovements or additions to documentation enhancementNew feature or request demo siteDemo site and production site content -
You must be logged in to vote -
You must be logged in to vote -
You must be logged in to vote Provide better summary for what is the same and what is different across organizations
documentationImprovements or additions to documentation -
You must be logged in to vote -
You must be logged in to vote Consider splitting doc from tools into separate repositories
enhancementNew feature or request -
You must be logged in to vote -
You must be logged in to vote What mitigations may lead to the most efficient risk reduction.
enhancementNew feature or request -
You must be logged in to vote
