VERIS Flashcards
1
Q
What are the 4 A’s?
A
Actors
Assets
Actions
Attributes
2
Q
What is VERIS?
A
It is an open format that anyone can use in their organisation without an license fee. It is also anonymous.
3
Q
What are the five main sections of the VERIS schema?
A
Incident tracking (incident_id) Victim Demographics (victim_id) without id'ing the org Incident Description (who did what to whom with what result) Discovery and Response (timeline of events) Impact Assessment (overall rating) example damaging
4
Q
What are the 3 Actors in the VERIS schema?
A
External Actors
Internal Actors
Partner Actors
5
Q
What are the main Actions in the VERIS schema?
A
Malware Hacking Social Misuse Physical Environmental Error
