Allen D. Householder

also capturing @ehatleback's [comments](https://github.com/CERTCC/SSVC/issues/412#issuecomment-1919764611) in #412: > In the first decision point, scrolling over the options highlights the top and bottom options (None and Active) in red, but the middle...

It is not clear to me whether this issue was fully or only partially resolved by - #513 Also note there are some more possibly related comments in #514. Both...

For reference: ICS-Patch is Dale Petersen's idea on how to adapt SSVC for ICS. - https://www.linkedin.com/pulse/ics-patch-what-patch-when-dale-peterson/ and - https://dale-peterson.com/wp-content/uploads/2020/10/ICS-Patch-0_1.pdf

Notes from conversation on 2021-02-24: This issue is related to #74 and how things like exposure change in response to mitigations. Evaluation in this context might conclude that safety or...

This would be a good fit for a _how to_ document, I think. We could also potentially provide an example tree with an appropriate description. We'd need to source the...

Can you please clarify if/how this is different from #4?

This issue will likely also involve changes or reorganization of: - `docs/topics/enumerating_actions.md` - `docs/topics/risk_tolerance_and_priority.md` - `docs/topics/items_with_same_priority.md` As well as a general search/replace to link at least some appearances of `outcome`,...

> Is there anything else to do for this? I don't see any further concrete value add. Yeah, I want this to exist in python because I want to be...

I've included a sidebar mention of RMM in - #488 But I think we might want to consider doing more. Maybe something like a crosswalk of the relevant RMM (esp....

> How should we handle information that naturally should be in two places? For example, the relationship between technical impact and CVSSv3 or CVSSv4 probably belongs both in a data...