cloudsecurityalliance/continuous-audit-metrics issues and pull requests

#90 - A set of process metrics

Pull Request - State: open - Opened by pritikin 8 months ago

#89 - More simple process metrics

Issue - State: open - Opened by pritikin 9 months ago

#88 - measurement frequency and sampling period are not defined in the published catalog (see section 3.2)

Issue - State: open - Opened by pritikin 11 months ago

#87 - BCR-08-M2 does not have sampling period or SLO recommendation

Issue - State: closed - Opened by pritikin 11 months ago - 1 comment

#86 - BCR-08-M1 and -M2 does not have sampling period or SLO recommendation

Issue - State: open - Opened by pritikin 11 months ago - 1 comment

#85 - Update README.md

Pull Request - State: closed - Opened by pritikin 12 months ago

#84 - CCC-07-M1 denominator is only over tested systems and does not touch on notification

Issue - State: open - Opened by pritikin about 1 year ago - 1 comment

#83 - Iam 05

Pull Request - State: open - Opened by pritikin about 1 year ago

#82 - DCS-06-M2 to measure effectiveness ("ownership")

Pull Request - State: closed - Opened by pritikin over 1 year ago

#81 - removed editorial note

Pull Request - State: closed - Opened by pritikin over 1 year ago

#80 - Update actions.yaml to fix ruby and upload artifact

Pull Request - State: closed - Opened by pritikin about 2 years ago

#79 - Proposal for documenting CAM catalog in OSCAL

Issue - State: open - Opened by mosi-k-platt about 2 years ago - 1 comment
Labels: enhancement

#78 - UEM-09-02 issue #75

Pull Request - State: closed - Opened by pritikin about 2 years ago - 1 comment

#77 - adding cek-03-m3 as per discussion #76

Pull Request - State: closed - Opened by pritikin over 2 years ago - 1 comment

#76 - CEK-03: System in the Middle is a violation of CEK-03 (as well as IPY-03) can we measure how often this occurs

Issue - State: open - Opened by pritikin over 2 years ago - 13 comments

#75 - UEM-09: measure the number of security incidents involving active malware on a host protected by the chosen anti-malware/virus service

Issue - State: open - Opened by pritikin over 2 years ago - 5 comments
Labels: Metric proposal, effectiveness

#74 - TVM-07 measure either the number of authenticated scans (where authentication is successful) or the number of deployed agents reporting vulnerabilities to the number of scanned hosts

Issue - State: open - Opened by pritikin over 2 years ago - 1 comment
Labels: Metric proposal, effectiveness

#73 - IPY-03: measure the number of data flows where the traffic is decrypted for analysis. If this number is not 0, this control is not effective.

Issue - State: open - Opened by pritikin over 2 years ago - 2 comments
Labels: Metric proposal, effectiveness

#72 - AIM-07: measure the number of times the account of the terminated person is represented in the logs as active between termination of employee and deactivation of account. If this number is non-zero, the control is not effective.

Issue - State: open - Opened by pritikin over 2 years ago
Labels: Metric proposal, effectiveness

#71 - CEK-04-M1 This should be tested over time, with the delta between 100% and current measured state decreasing over time, or this metric is not driving improvement.

Issue - State: open - Opened by pritikin over 2 years ago - 1 comment
Labels: Metric proposal, metric bug, effectiveness

#70 - CEK-03-M2 This should be tested over time, with the delta between 100% and current measured state decreasing over time, or this metric is not driving improvement.

Issue - State: open - Opened by pritikin over 2 years ago - 1 comment
Labels: Metric proposal, metric bug, effectiveness

#69 - AIS-06: The number of verified vulnerabilities in tested code is proportionally less than the number of verified vulnerabilities in untested code.

Issue - State: open - Opened by pritikin over 2 years ago
Labels: Metric proposal, effectiveness

#68 - AIS-07: number of vulnerabilities deployed in production code exploited in a penetration test.

Issue - State: open - Opened by pritikin over 2 years ago
Labels: Metric proposal, effectiveness

#67 - AIS-06: The number of verified vulnerabilities in tested code is proportionally less than the number of verified vulnerabilities in untested code.

Issue - State: open - Opened by pritikin over 2 years ago
Labels: Metric proposal, effectiveness

#66 - Initial JSON schema for yaml

Pull Request - State: closed - Opened by pritikin over 2 years ago - 1 comment

#65 - Limit automated actions to verifying html (no auto-commit of autogenerated html)

Pull Request - State: closed - Opened by pritikin over 2 years ago

#64 - Fix small error in schema.

Pull Request - State: closed - Opened by apannetrat over 2 years ago

#63 - Add YAML schema validation.

Pull Request - State: closed - Opened by apannetrat over 2 years ago - 1 comment

#62 - Bring all the documentation into this repo.

Issue - State: open - Opened by apannetrat over 2 years ago
Labels: documentation

#61 - Label all issues according to tracks

Issue - State: closed - Opened by pritikin over 2 years ago - 3 comments

#60 - How should we generate metrics-catalog.html

Issue - State: open - Opened by pritikin over 2 years ago - 4 comments
Labels: htmlpreview

#59 - yaml validation + alt implementation

Pull Request - State: open - Opened by rajkrishnamurthy over 2 years ago - 4 comments

#58 - Fixes to primary-dataset.yml and alternative implementation of html generation using erb

Pull Request - State: closed - Opened by rajkrishnamurthy over 2 years ago - 1 comment

#57 - YAML Syntax Errors in Continuous Audit Metrics

Issue - State: open - Opened by aj-stein-nist over 2 years ago - 7 comments
Labels: yaml

#56 - CCMv4 in OSCAL Format

Issue - State: open - Opened by aj-stein-nist over 2 years ago - 4 comments
Labels: integrations

#55 - Updated primary-dataset.yml with related control IDs for CEK in IPY-03-M2

Pull Request - State: closed - Opened by mosi-k-platt over 2 years ago

#55 - Updated primary-dataset.yml with related control IDs for CEK in IPY-03-M2

Pull Request - State: closed - Opened by mosi-k-platt over 2 years ago

#54 - Documentation on Schema and/or Required Metrics' Property Formats?

Issue - State: closed - Opened by aj-stein-nist over 2 years ago - 1 comment

#53 - Update primary-dataset.yml

Pull Request - State: closed - Opened by mosi-k-platt over 2 years ago

#52 - Documentation of YAML Format and Schema

Issue - State: open - Opened by aj-stein-nist over 2 years ago - 5 comments
Labels: documentation, yaml

#52 - Documentation of YAML Format and Schema

Issue - State: open - Opened by aj-stein-nist over 2 years ago - 5 comments
Labels: documentation, yaml

#51 - Resolve build failures

Pull Request - State: closed - Opened by pritikin over 2 years ago - 1 comment

#50 - Adds BCR-08 specification to ccm_references

Pull Request - State: closed - Opened by adalo over 2 years ago

#49 - Adds proposed BCR-08-M2 against Issue #24

Pull Request - State: closed - Opened by adalo over 2 years ago

#48 - Adds proposed BCR-08-M1 against Issue #24

Pull Request - State: closed - Opened by adalo over 2 years ago

#47 - Minor spelling fix

Pull Request - State: closed - Opened by adalo over 2 years ago

#46 - This is an attempt to update nokigiri

Pull Request - State: closed - Opened by apannetrat over 2 years ago

#45 - dependebot issues from nokogiri

Issue - State: closed - Opened by pritikin over 2 years ago

#44 - Auditguidelines

Pull Request - State: closed - Opened by pritikin over 2 years ago - 1 comment

#43 - include main control description in html preview

Issue - State: closed - Opened by pritikin over 2 years ago - 1 comment
Labels: htmlpreview

#42 - blog post for TVM metric

Issue - State: open - Opened by mosi-k-platt over 2 years ago
Labels: blog post

#41 - blog post for an AIS metric

Issue - State: open - Opened by pritikin over 2 years ago
Labels: blog post

#40 - Add metric 'AIS-05-M1' for discussion.

Pull Request - State: closed - Opened by apannetrat over 2 years ago - 2 comments

#39 - CCC-07 requires "with proactive notification" which is an opportunity for a process metric

Issue - State: open - Opened by pritikin over 2 years ago
Labels: Metric proposal

#38 - Come up with a template for "metric-of-the-week" blog

Issue - State: closed - Opened by rajkrishnamurthy over 2 years ago - 4 comments
Labels: blog post

#37 - Need to have a defined method of deprecating a metric

Issue - State: open - Opened by pritikin over 2 years ago - 4 comments
Labels: yaml

#36 - run actions on PRs and add ability to manually trigger

Issue - State: open - Opened by pritikin over 2 years ago - 2 comments
Labels: htmlpreview

#35 - Add "Audit Guidelines" to html output

Issue - State: open - Opened by pritikin over 2 years ago - 1 comment
Labels: audit guidelines

#34 - Update metrics-catalog.html after changes to HTML rendering.

Pull Request - State: closed - Opened by apannetrat over 2 years ago

#33 - Added table of content to HTML and collapsible sections.

Pull Request - State: closed - Opened by apannetrat over 2 years ago

#32 - Proposed metrics for AIS-07/TVM-03 and LOG-03/STA-07

Issue - State: open - Opened by apannetrat over 2 years ago - 8 comments
Labels: Metric proposal

#31 - Docs directory added and README updated to address issue #29

Pull Request - State: closed - Opened by pritikin over 2 years ago

#30 - IAM specific configurations and adherence

Issue - State: open - Opened by ganesh29072 over 2 years ago - 1 comment
Labels: Metric proposal

#29 - link the preso from the README, upload the ppt too

Issue - State: closed - Opened by pritikin over 2 years ago

#28 - IPY-03 lists Related CCMv4 Control IDs "CEK, IVS-02, IPY-02, DSP-05"

Issue - State: closed - Opened by pritikin over 2 years ago - 3 comments
Labels: metric bug

#27 - There are multiple types of "Related CCMv4 Control IDs" should we clarify in the catalog?

Issue - State: open - Opened by pritikin over 2 years ago - 6 comments
Labels: yaml

#26 - Metric proposals - List of ideas

Issue - State: open - Opened by apannetrat over 2 years ago - 3 comments
Labels: Metric proposal

#25 - Metric proposal: number of controls deployed

Issue - State: open - Opened by apannetrat over 2 years ago - 4 comments
Labels: Metric proposal

#24 - BCR-08 Backup

Issue - State: closed - Opened by mcsnps over 2 years ago - 6 comments
Labels: Metric proposal

#23 - Application security testing metrics

Issue - State: open - Opened by mcsnps over 2 years ago - 4 comments
Labels: Metric proposal

#22 - removed unit and type as per issue#19

Pull Request - State: closed - Opened by pritikin almost 3 years ago

#21 - need a working example of a metric from data collection to generation of the final SLO

Issue - State: open - Opened by pritikin almost 3 years ago
Labels: implementation

#20 - simplified YAML structure by removing extra period entries

Pull Request - State: closed - Opened by pritikin almost 3 years ago

#20 - simplified YAML structure by removing extra period entries

Pull Request - State: closed - Opened by pritikin almost 3 years ago

#19 - Should we simplify the YAML structure of metrics?

Issue - State: closed - Opened by apannetrat almost 3 years ago - 7 comments

#18 - Added data/front-matter.md which is added to the generated HTML catalog.

Pull Request - State: closed - Opened by apannetrat almost 3 years ago - 1 comment

#17 - Outline for Audit Guidelines contents

Issue - State: open - Opened by pritikin almost 3 years ago - 8 comments
Labels: audit guidelines

#16 - document and explain manual metrics vs continuous metrics. as an appendix?

Issue - State: open - Opened by pritikin almost 3 years ago
Labels: documentation

#15 - Grammar and spelling tweaks

Pull Request - State: closed - Opened by adalo almost 3 years ago

#14 - Update README.md

Pull Request - State: closed - Opened by apannetrat almost 3 years ago

#13 - Add automated generation of HTML catalog with GitHub actions

Pull Request - State: closed - Opened by apannetrat almost 3 years ago - 2 comments

#12 - Fix YAML errors and formatting issues

Pull Request - State: closed - Opened by apannetrat almost 3 years ago - 1 comment

#11 - Add remaining catalog v1 content

Pull Request - State: closed - Opened by mosi-k-platt almost 3 years ago

#10 - add to readme a "help with github" section for new folks

Issue - State: closed - Opened by pritikin almost 3 years ago - 1 comment

#9 - move the old spreadsheet into a readonly format that is available for pulling ideas from

Issue - State: open - Opened by pritikin almost 3 years ago - 2 comments
Labels: documentation

#8 - want a github action to automatically generate metrics-catalog.html

Issue - State: closed - Opened by pritikin almost 3 years ago - 1 comment

#7 - want a github action to automatically lint the yaml file

Issue - State: closed - Opened by pritikin almost 3 years ago - 2 comments

#6 - test

Issue - State: closed - Opened by pritikin almost 3 years ago - 1 comment

#5 - Update with content from the CAML metricsModel

Pull Request - State: closed - Opened by mosi-k-platt almost 3 years ago

#4 - Update README.md

Pull Request - State: closed - Opened by pritikin almost 3 years ago

#3 - A proposal for a format for metric expressions

Issue - State: closed - Opened by apannetrat almost 3 years ago - 2 comments

#2 - Proposal for metric language

Issue - State: open - Opened by oxisto about 3 years ago - 1 comment
Labels: yaml

#1 - Fix spelling

Pull Request - State: closed - Opened by oxisto about 3 years ago

GitHub / cloudsecurityalliance/continuous-audit-metrics issues and pull requests