Re: [cti-cybox] CybOX Object Selection

["Jordan, Bret" <bret.jordan@bluecoat.com>]

I would advocate against the "lets include it because it is easy" approach. 

If there is not a strong use case for an object *or* there is not a strong champion on the list to advocate for it - then skip it (IE, an object should need a strong use case *and* a strong champion who actually uses it today in active use). Adding later is easier than revising or removing.

I agree with this, 100%.. 

Thanks,

Bret

Bret Jordan CISSP

Director of Security Architecture and Standards | Office of the CTO

Blue Coat Systems

PGP Fingerprint: 63B4 FC53 680A 6B7D 1447  F2C0 74F8 ACAE 7415 0050

"Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg." 

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail