Skip to content

Issues: CloudSecurityAlliance/continuous-audit-metrics

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

37 Open 15 Closed
37 Open 15 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

More simple process metrics
#89 opened May 20, 2024 by pritikin
measurement frequency and sampling period are not defined in the published catalog (see section 3.2)
#88 opened Mar 13, 2024 by pritikin
BCR-08-M1 and -M2 does not have sampling period or SLO recommendation
#86 opened Mar 13, 2024 by pritikin
1
CCC-07-M1 denominator is only over tested systems and does not touch on notification
#84 opened Nov 22, 2023 by pritikin
1
Proposal for documenting CAM catalog in OSCAL enhancement New feature or request
#79 opened Feb 1, 2023 by mosi-k-platt
@mosi-k-platt
1
CEK-03: System in the Middle is a violation of CEK-03 (as well as IPY-03) can we measure how often this occurs
#76 opened Oct 13, 2022 by pritikin
@pritikin @zzaian
13
UEM-09: measure the number of security incidents involving active malware on a host protected by the chosen anti-malware/virus service effectiveness Metric proposal
#75 opened Oct 12, 2022 by pritikin
5
TVM-07 measure either the number of authenticated scans (where authentication is successful) or the number of deployed agents reporting vulnerabilities to the number of scanned hosts effectiveness Metric proposal
#74 opened Oct 12, 2022 by pritikin
1
IPY-03: measure the number of data flows where the traffic is decrypted for analysis. If this number is not 0, this control is not effective. effectiveness Metric proposal
#73 opened Oct 12, 2022 by pritikin
2
AIM-07: measure the number of times the account of the terminated person is represented in the logs as active between termination of employee and deactivation of account. If this number is non-zero, the control is not effective. effectiveness Metric proposal
#72 opened Oct 12, 2022 by pritikin
CEK-04-M1 This should be tested over time, with the delta between 100% and current measured state decreasing over time, or this metric is not driving improvement. effectiveness metric bug Metric proposal
#71 opened Oct 12, 2022 by pritikin
1
CEK-03-M2 This should be tested over time, with the delta between 100% and current measured state decreasing over time, or this metric is not driving improvement. effectiveness metric bug Metric proposal
#70 opened Oct 12, 2022 by pritikin
1
AIS-06: The number of verified vulnerabilities in tested code is proportionally less than the number of verified vulnerabilities in untested code. effectiveness Metric proposal
#69 opened Oct 12, 2022 by pritikin
AIS-07: number of vulnerabilities deployed in production code exploited in a penetration test. effectiveness Metric proposal
#68 opened Oct 12, 2022 by pritikin
AIS-06: The number of verified vulnerabilities in tested code is proportionally less than the number of verified vulnerabilities in untested code. effectiveness Metric proposal
#67 opened Oct 12, 2022 by pritikin
Bring all the documentation into this repo. documentation Improvements or additions to documentation
#62 opened Aug 18, 2022 by apannetrat
How should we generate metrics-catalog.html htmlpreview
#60 opened Aug 16, 2022 by pritikin
4
YAML Syntax Errors in Continuous Audit Metrics yaml
#57 opened Aug 3, 2022 by aj-stein-nist
@aj-stein-nist
7
CCMv4 in OSCAL Format integrations
#56 opened Aug 3, 2022 by aj-stein-nist
4
Documentation of YAML Format and Schema documentation Improvements or additions to documentation yaml
#52 opened Aug 3, 2022 by aj-stein-nist
@pritikin
5
blog post for TVM metric blog post
#42 opened Jun 24, 2022 by mosi-k-platt
@mosi-k-platt
blog post for an AIS metric blog post
#41 opened Jun 24, 2022 by pritikin
@rajkrishnamurthy
CCC-07 requires "with proactive notification" which is an opportunity for a process metric Metric proposal
#39 opened Jun 16, 2022 by pritikin
Need to have a defined method of deprecating a metric yaml
#37 opened Jun 9, 2022 by pritikin
4
run actions on PRs and add ability to manually trigger htmlpreview
#36 opened Jun 8, 2022 by pritikin
@pritikin
2
ProTip! Add no:assignee to see everything that’s not assigned.