Subject: [sacm] Other Transformations and Next Work

From: Adam Montville <[email-masked]>
Date: Mon, 24 Sep 2012 14:39:02 +0000

All:

The asset identification transformation has been posted, and it seems that the ASR transformation will be done as well.   I think we can normatively reference CPE, if necessary, and probably SWID as well.

But, these are (as presently proposed in the draft charter) phase two efforts.  We should probably consider getting something done with respect to the first few deliverables of phase one.

That said, some valid concerns have been raised to the list.  Should we work on the communication protocols first or second?  What comes first, the chicken or the egg?  If we can normatively reference those pieces used for effective assessment and/or automation, then we should be able to safely take care of the protocols first.

Is anyone yet working on the document specifying communication protocols used for security automation and continuous assessment?

Adam