Skip to content

Conversation

ahouseholder
Copy link
Contributor

@ahouseholder ahouseholder commented Feb 20, 2025

Creating this as a draft so we can figure out where to go with it.

Copilot Summary

This pull request introduces comprehensive support for National Cybersecurity Incident Scoring System (NCISS) decision points, including new data definitions, documentation, and navigation updates. It adds JSON schemas for various NCISS decision points (Functional Impact, Incident Severity, Information Impact, Observed Activity, Observed Activity Location, and Recoverability), provides corresponding documentation pages with usage examples, and updates the documentation navigation to include these new sections. Additionally, it introduces a new NcissDecisionPoint class in the codebase to model NCISS decision points.

NCISS Decision Point Data Definitions:

  • Added JSON files defining NCISS decision points and their versions for:
    • Functional Impact (functional_impact_1_0_0.json, functional_impact_2_0_0.json) [1] [2]
    • Incident Severity (incident_severity_1_0_0.json, incident_severity_2_0_0.json) [1] [2]
    • Information Impact (information_impact_1_0_0.json, information_impact_2_0_0.json) [1] [2]
    • Observed Activity (observed_activity_0_0_1.json)
    • Observed Activity Location (observed_activity_location_1_0_0.json)
    • Recoverability (recoverability_1_0_0.json)

Documentation Additions:

  • Created new documentation pages for each NCISS decision point, including code examples and versioning details:
    • Functional Impact
    • Incident Severity
    • Information Impact
    • Observed Activity
    • Observed Activity Location
    • Recoverability
  • Added an index page introducing NCISS and listing all decision points

Documentation Navigation:

  • Updated mkdocs.yml to add a new "NCISS Decision Points" section with links to all new documentation pages

Codebase Updates:

  • Introduced the NcissDecisionPoint class in base.py to model NCISS decision points in the codebase

Squashed commits:
[7e4fada] update incident severity
Squashed commits:
[f5827ab] add recoverability

add incident severity decision point
add recoverability decision point
…national-cybersecurity-incident-scoring-system

# Conflicts:
#	mkdocs.yml
@ahouseholder ahouseholder linked an issue Feb 20, 2025 that may be closed by this pull request
@ahouseholder ahouseholder self-assigned this Feb 24, 2025
…nal-cybersecurity-incident-scoring-system

# Conflicts:
#	src/test/test_doctools.py
@ahouseholder ahouseholder mentioned this pull request Mar 18, 2025
…national-cybersecurity-incident-scoring-system
…ty-incident-scoring-system

# Conflicts:
#	src/ssvc/decision_points/base.py
…nal-cybersecurity-incident-scoring-system

# Conflicts:
#	src/test/test_mixins.py
ahouseholder and others added 6 commits March 20, 2025 12:50
…oring-system

# Conflicts:
#	data/schema/v1/Decision_Point-1-0-1.schema.json
#	src/ssvc/_mixins.py
#	src/ssvc/decision_points/base.py
#	src/ssvc/namespaces.py
#	src/test/test_mixins.py
…nal-cybersecurity-incident-scoring-system

# Conflicts:
#	src/ssvc/decision_points/base.py
…national-cybersecurity-incident-scoring-system

# Conflicts:
#	src/ssvc/decision_points/base.py
@ahouseholder ahouseholder added tech/data Data implementation (content of /data, data object instances, etc.) integration Related to integration of SSVC into another framework or system labels Jul 1, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
integration Related to integration of SSVC into another framework or system tech/data Data implementation (content of /data, data object instances, etc.)
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Model National Cyber Incident Scoring System (NCISS)
1 participant